Add security measures to import.gynther.se by blocking known harmful paths

2026-06-20 13:09:05 +02:00
parent a2119d3f9d
commit 4afffa74fd
1 changed files with 5 additions and 0 deletions
@@ -70,6 +70,11 @@ gitea.gynther.se {
 # ============================================
 import.gynther.se {
 	import common
+
+	# Blockera kända skadliga sökvägar
+    @blocked path_regexp ^/(\.env|\.git|wp-login|robots\.txt|api/graphql|actuator/env|\.DS_Store|file6\.php|wp-.*\.php)$
+    respond @blocked 403
+	
 	reverse_proxy recipe-import-service:3000
 }