From 4afffa74fd3e0125120a4e500b7df85b09d882f3 Mon Sep 17 00:00:00 2001
From: Nils-Johan Gynther <nils-johan.gynther@neoleaf.se>
Date: Sat, 20 Jun 2026 13:09:05 +0200
Subject: [PATCH] Add security measures to import.gynther.se by blocking known
 harmful paths

---
 conf/Caddyfile | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/conf/Caddyfile b/conf/Caddyfile
index ef16140..f0fd69d 100644
--- a/conf/Caddyfile
+++ b/conf/Caddyfile
@@ -70,6 +70,11 @@ gitea.gynther.se {
 # ============================================
 import.gynther.se {
 	import common
+
+	# Blockera kända skadliga sökvägar
+    @blocked path_regexp ^/(\.env|\.git|wp-login|robots\.txt|api/graphql|actuator/env|\.DS_Store|file6\.php|wp-.*\.php)$
+    respond @blocked 403
+	
 	reverse_proxy recipe-import-service:3000
 }