Skip to content

Commit e6c69da

Browse files
committed
Validate dns servers for nginx.conf to prevent ipv6 addresses.
1 parent f3a2b7e commit e6c69da

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

install/upgrade/1.00.0-190618.sh

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,14 @@ if [ ! -e /etc/ssl/dhparam.pem ]; then
118118

119119
# Update DNS servers in nginx.conf
120120
dns_resolver=$(cat /etc/resolv.conf | grep -i '^nameserver' | cut -d ' ' -f2 | tr '\r\n' ' ' | xargs)
121-
sed -i "s/1.0.0.1 1.1.1.1/$dns_resolver/g" /etc/nginx/nginx.conf
121+
for ip in $dns_resolver; do
122+
if [[ $ip =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
123+
resolver="$ip $resolver"
124+
fi
125+
done
126+
if [ ! -z "$resolver" ]; then
127+
sed -i "s/1.0.0.1 1.1.1.1/$dns_resolver/g" /etc/nginx/nginx.conf
128+
fi
122129

123130
# Restart Nginx service
124131
systemctl restart nginx >/dev/null 2>&1

0 commit comments

Comments
 (0)