Skip to content

Commit b9641c4

Browse files
committed
Improve default exclusions
1 parent c5c7a20 commit b9641c4

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

global/server/exclusions.conf

+6-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,11 @@
11
# Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac).
22
# Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban)
3-
location ~ /\. {
3+
location ~* /\.(?!well-known\/) {
4+
deny all;
5+
}
6+
7+
# Prevent access to certain file extensions
8+
location ~\.(ini|log|conf)$ {
49
deny all;
510
}
611

0 commit comments

Comments
 (0)