. files security fix

fixes digitalocean#88 changes digitalocean#50
javastar920905 · May 22, 2019 · 1e88625 · 1e88625
1 parent ea3afc2
commit 1e88625
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/public/templates/conf/nginxconfig.io/general.conf.html b/public/templates/conf/nginxconfig.io/general.conf.html
@@ -11,10 +11,15 @@
 add_header Strict-Transport-Security "max-age=31536000{{ isHSTSSubdomains() ? '; includeSubDomains' : '' }}{{ isHSTSPreload() ? '; preload' : '' }}" always;</span>
 
 # . files
-location ~ /\.(?!well-known) {
+location ^~ /. {
 	deny all;
 }
 
+# .well-known
+location ^~ /.well-known/ {
+	allow all;
+}
+
 # favicon.ico
 location = /favicon.ico {
 	log_not_found off;<!--