Docs: clarify dotfile access
AlannaBurke opened this issue · 0 comments
update these docs: https://docs.lagoon.sh/applications/drupal/services/nginx/#included-drupal-configuration-drupalconf
request:
can we add a hint regarding the access to dotfiles ( #https://github.com/uselagoon/lagoon-images/blob/45f037f04fa43342305a8006128ff56d0665775e/images/nginx-drupal/drupal.conf#L40-L43)?
re this ticket: https://amazeeio.atlassian.net/browse/AIOSD-12255?atlOrigin=eyJpIjoiMzM3Nzc4NWRlODQzNDgzMzk3N2MxYjQ0YTgxYTQ5MTYiLCJwIjoiaGFscC1zbGFjayJ9
from slack convo:
The path was (from the ticket)
/.well-known/apple-developer-merchantid-domain-association
Perhaps /.well-known/ should not be blocked by Nginx, that would make sense to be honest.
The main point of that rule is to block stuff like /.aws/credentials.yml etc