JGoutin / ansible_home

A collection of Ansible roles for home free software self-hosting.
https://galaxy.ansible.com/jgoutin/home
GNU General Public License v3.0
31 stars 6 forks source link

nextcloud: Limit Nginx Paths access to relevant directories only #74

Open JGoutin opened 1 year ago

JGoutin commented 1 year ago

Currently have full access to the /var/www/nextcloud directory. Some paths are restricted in the Nginx configuration, but should be blocked by systemd especially config that contains sensitive data.

From Nginx configuration:

location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)                { return 404; }