Merge pull request #3284 from NetspherePub/072NginxSecurityFixed

Adds production.conf security configuration missing in version 0.7.2
This commit is contained in:
Mouse Reeve 2024-02-29 15:55:56 -08:00 committed by GitHub
commit 6a70eadba8
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -96,7 +96,7 @@ server {
# # directly serve images and static files from the
# # bookwyrm filesystem using sendfile.
# # make the logs quieter by not reporting these requests
# location ~ \.(bmp|ico|jpg|jpeg|png|svg|tif|tiff|ttf|webp|css|js)$ {
# location ~ \.(bmp|ico|jpg|jpeg|png|svg|tif|tiff|ttf|webp|css|js|woff|ttf)$ {
# root /app;
# try_files $uri =404;
# add_header X-Cache-Status STATIC;
@ -104,7 +104,7 @@ server {
# }
# # block access to any non-image files from images or static
# location ~ ^/images/ {
# location ~ ^/(images|static)/ {
# return 403;
# }
#