alphagov / content-publisher

Publishing application for GOV.UK
https://docs.publishing.service.gov.uk/apps/content-publisher.html
MIT License
33 stars 11 forks source link

Configure hosts for application #3277

Closed brucebolt closed 1 month ago

brucebolt commented 1 month ago

Note: the healthcheck endpoints are requested by IP, not domain, so we need to specifically exclude them from the protection.

Trello card

brucebolt commented 4 weeks ago

I've realised this allows domains like app-name.dodgygov.uk. The regex will need to be updated to app-name\..*\.gov.uk$.