copenhagentruckwash/api
1
0
Fork 0
Code Issues Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

Deny web access to replication bootstrap snapshots

Browse Source
This commit is contained in:
Jeppe B
2026-06-01 23:19:04 +02:00
parent 7bb67b0470
commit e41b226529
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/caddy/Caddyfile
+4
View File
@@ -10,6 +10,10 @@
# CORS is handled at the edge by Traefik's headers middleware. # CORS is handled at the edge by Traefik's headers middleware.
# Do not set or strip Access-Control-* headers here to avoid conflicts. # Do not set or strip Access-Control-* headers here to avoid conflicts.
# Replication bootstrap snapshots contain sensitive failover credentials.
@replication_bootstrap path /storage/replication-bootstrap.json /storage/replication-bootstrap-*
respond @replication_bootstrap 404
# PHP handling via FastCGI to php-fpm pool # PHP handling via FastCGI to php-fpm pool
php_fastcgi php1:9000 php2:9000 php3:9000 php4:9000 php5:9000 php_fastcgi php1:9000 php2:9000 php3:9000 php4:9000 php5:9000
services/caddy/Caddyfile-staging
+4
View File
@@ -10,6 +10,10 @@
# CORS is handled at the edge by Traefik's headers middleware. # CORS is handled at the edge by Traefik's headers middleware.
# Do not set or strip Access-Control-* headers here to avoid conflicts. # Do not set or strip Access-Control-* headers here to avoid conflicts.
# Replication bootstrap snapshots contain sensitive failover credentials.
@replication_bootstrap path /storage/replication-bootstrap.json /storage/replication-bootstrap-*
respond @replication_bootstrap 404
# PHP handling via FastCGI to php-fpm pool # PHP handling via FastCGI to php-fpm pool
php_fastcgi php-staging:9000 php_fastcgi php-staging:9000