lsemenenko/wordpress-nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Improve default exclusions

Browse Source
This commit is contained in:
Ashley Rich 2020-04-25 10:20:40 +01:00
parent c5c7a203a3
commit b9641c487e
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
global/server/exclusions.conf
View File

@ -1,6 +1,11 @@
# Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac). # Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac).
# Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban) # Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban)
location ~ /\. { location ~* /\.(?!well-known\/) {
deny all;
}
# Prevent access to certain file extensions
location ~\.(ini|log|conf)$ {
deny all; deny all;
} }