Merge a1d0efedca5baca7db824df12cd6e8fe6be9bde4 into b25103f8e24985ff60dafc26d29b951b69b7c5bd

This commit is contained in:
Eric Nemchik 2026-02-23 21:43:10 +00:00 committed by GitHub
commit 53259f4d39
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 12 additions and 3 deletions

View File

@ -90,6 +90,7 @@ init_diagram: |
"xbackbone:latest" <- Base Images
# changelog
changelogs:
- {date: "08.02.26:", desc: "Existing users should update: site-confs/default.conf - Deny access to all dotfiles."}
- {date: "27.05.24:", desc: "Rebase to Alpine 3.20. Existing users should update their nginx confs to avoid http2 deprecation warnings."}
- {date: "28.12.23:", desc: "Rebase to Alpine 3.19 with php 8.3."}
- {date: "25.12.23:", desc: "Existing users should update: site-confs/default.conf - Cleanup default site conf."}

View File

@ -1,4 +1,4 @@
## Version 2025/07/09 - Changelog: https://github.com/linuxserver/docker-xbackbone/commits/main/root/defaults/nginx/site-confs/default.conf.sample
## Version 2026/02/08 - Changelog: https://github.com/linuxserver/docker-xbackbone/commits/main/root/defaults/nginx/site-confs/default.conf.sample
server {
listen 80 default_server;
@ -39,9 +39,17 @@ server {
include /etc/nginx/fastcgi_params;
}
# deny access to .htaccess/.htpasswd files
location ~ /\.ht {
# deny access to all dotfiles
location ~ /\. {
deny all;
log_not_found off;
access_log off;
return 404;
}
# Allow access to the ".well-known" directory
location ^~ /.well-known {
allow all;
}
autoindex off;