Skip to content

Update default.conf.sample to deny dotfile access#76

Open
nemchik wants to merge 1 commit into
mainfrom
deny-dotfile-access
Open

Update default.conf.sample to deny dotfile access#76
nemchik wants to merge 1 commit into
mainfrom
deny-dotfile-access

Conversation

@nemchik
Copy link
Copy Markdown
Member

@nemchik nemchik commented May 5, 2026

No description provided.

Signed-off-by: Eric Nemchik <eric@nemchik.com>
Copilot AI review requested due to automatic review settings May 5, 2026 21:40
@LinuxServer-CI LinuxServer-CI moved this to PRs Ready For Team Review in Issue & PR Tracker May 5, 2026
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the sample nginx vhost for the container to block dotfile access by default while carving out an exception for /.well-known, which is typically needed for ACME and similar public metadata endpoints.

Changes:

  • Added a /.well-known location intended to remain publicly accessible.
  • Added a regex location that returns 404 for dotfile requests.
  • Reformatted the inline PHP file-existence check without changing its behavior.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

index index.html index.htm index.php;

# Allow access to the ".well-known" directory
location ^~ /.well-known {
Comment on lines +23 to +26
location ^~ /.well-known {
allow all;
}

@LinuxServer-CI
Copy link
Copy Markdown
Contributor

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/speedtest-tracker/v1.14.0-pkg-04a114b3-dev-db30ef8e29b124cb6f4ef85266fcce34dda34ba2-pr-76/index.html
https://ci-tests.linuxserver.io/lspipepr/speedtest-tracker/v1.14.0-pkg-04a114b3-dev-db30ef8e29b124cb6f4ef85266fcce34dda34ba2-pr-76/shellcheck-result.xml

Tag Passed
amd64-v1.14.0-pkg-04a114b3-dev-db30ef8e29b124cb6f4ef85266fcce34dda34ba2-pr-76
arm64v8-v1.14.0-pkg-04a114b3-dev-db30ef8e29b124cb6f4ef85266fcce34dda34ba2-pr-76

@LinuxServer-CI LinuxServer-CI moved this from PRs Ready For Team Review to PRs in Issue & PR Tracker May 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

3 participants