Fix gitea ssl (hestiacp#4012)

asessa · web-flow · commit 5022569b367e · 2023-09-19T10:49:03.000+02:00
diff --git a/install/deb/templates/web/nginx/php-fpm/gitea.stpl b/install/deb/templates/web/nginx/php-fpm/gitea.stpl
@@ -24,8 +24,9 @@ server {
 
 	include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;
 
-	location ~ /.well-known {
-		allow all;
+	location ~ /\.(?!well-known\/) {
+		deny all;
+		return 404;
 	}
 
 	location / {
diff --git a/install/deb/templates/web/nginx/php-fpm/gitea.tpl b/install/deb/templates/web/nginx/php-fpm/gitea.tpl
@@ -15,8 +15,9 @@ server {
 
 	include %home%/%user%/conf/web/%domain%/nginx.forcessl.conf*;
 
-	location ~ /.well-known {
-		allow all;
+	location ~ /\.(?!well-known\/) {
+		deny all;
+		return 404;
 	}
 
 	location / {

Original file line number	Diff line number	Diff line change
`@@ -24,8 +24,9 @@ server {`
`24`	`24`
`25`	`25`	`include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;`
`26`	`26`
`27`		`- location ~ /.well-known {`
`28`		`- allow all;`
	`27`	`+ location ~ /\.(?!well-known\/) {`
	`28`	`+ deny all;`
	`29`	`+ return 404;`
`29`	`30`	`}`
`30`	`31`
`31`	`32`	`location / {`
Original file line number	Diff line number	Diff line change
`@@ -15,8 +15,9 @@ server {`
`15`	`15`
`16`	`16`	`include %home%/%user%/conf/web/%domain%/nginx.forcessl.conf*;`
`17`	`17`
`18`		`- location ~ /.well-known {`
`19`		`- allow all;`
	`18`	`+ location ~ /\.(?!well-known\/) {`
	`19`	`+ deny all;`
	`20`	`+ return 404;`
`20`	`21`	`}`
`21`	`22`
`22`	`23`	`location / {`