Skip to content

Commit f73ca23

Browse files
committed
Block access to webmail.domain.com/data/ with Rainloop
According their notice: https://www.rainloop.net/docs/installation/#notice
1 parent 3cdd85a commit f73ca23

File tree

4 files changed

+21
-1
lines changed

4 files changed

+21
-1
lines changed

install/deb/templates/mail/nginx/default_rainloop.stpl

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,11 @@ ssl_certificate_key %ssl_key%;
1111
ssl_stapling on;
1212
ssl_stapling_verify on;
1313

14+
location ^~ /data {
15+
deny all;
16+
return 404;
17+
}
18+
1419
location ~ ^/(README.md|config|temp|logs|bin|SQL|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {
1520
deny all;
1621
return 404;

install/deb/templates/mail/nginx/default_rainloop.tpl

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,12 @@ location ~ /\.(?!well-known\/) {
1313
return 404;
1414
}
1515

16-
location ~ /data/ {
16+
location ^~ /data {
17+
deny all;
18+
return 404;
19+
}
20+
21+
location ~ ^/(README.md|config|temp|logs|bin|SQL|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {
1722
deny all;
1823
return 404;
1924
}

install/deb/templates/mail/nginx/rainloop.stpl

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,11 @@ location ~ /\.(?!well-known\/) {
1616
return 404;
1717
}
1818

19+
location ^~ /data {
20+
deny all;
21+
return 404;
22+
}
23+
1924
location ~ ^/(README.md|config|temp|logs|bin|SQL|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {
2025
deny all;
2126
return 404;

install/deb/templates/mail/nginx/rainloop.tpl

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,11 @@ location ~ /\.(?!well-known\/) {
1313
return 404;
1414
}
1515

16+
location ^~ /data {
17+
deny all;
18+
return 404;
19+
}
20+
1621
location ~ ^/(README.md|config|temp|logs|bin|SQL|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {
1722
deny all;
1823
return 404;

0 commit comments

Comments
 (0)