copenhagentruckwash/api
1
0
Fork 0
Code Issues Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #223 from copenhagentruckwash/propose-fix-for-exposed-bootstrap-secret

Browse Source 
Protect replication bootstrap file from static serving
This commit is contained in:
Jeppe B
2026-06-01 23:14:52 +02:00
committed by GitHub
parent 38c4c32f07 fe5ebdc203
commit 6fbf7f271d
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/caddy/Caddyfile
+4
View File
@@ -10,6 +10,10 @@
# CORS is handled at the edge by Traefik's headers middleware. # CORS is handled at the edge by Traefik's headers middleware.
# Do not set or strip Access-Control-* headers here to avoid conflicts. # Do not set or strip Access-Control-* headers here to avoid conflicts.
# Do not expose local replication bootstrap material from the public web root.
@replicationBootstrap path /storage/replication-bootstrap.json
respond @replicationBootstrap 404
# PHP handling via FastCGI to php-fpm pool # PHP handling via FastCGI to php-fpm pool
php_fastcgi php1:9000 php2:9000 php3:9000 php4:9000 php5:9000 php_fastcgi php1:9000 php2:9000 php3:9000 php4:9000 php5:9000
services/caddy/Caddyfile-staging
+4
View File
@@ -10,6 +10,10 @@
# CORS is handled at the edge by Traefik's headers middleware. # CORS is handled at the edge by Traefik's headers middleware.
# Do not set or strip Access-Control-* headers here to avoid conflicts. # Do not set or strip Access-Control-* headers here to avoid conflicts.
# Do not expose local replication bootstrap material from the public web root.
@replicationBootstrap path /storage/replication-bootstrap.json
respond @replicationBootstrap 404
# PHP handling via FastCGI to php-fpm pool # PHP handling via FastCGI to php-fpm pool
php_fastcgi php-staging:9000 php_fastcgi php-staging:9000