openbudgets / platform

Tracking issues related to the working around the OpenBudgets.eu platform (WP4).
GNU General Public License v3.0
1 stars 0 forks source link

Don't accept any old domain on the production server #49

Closed pwalsh closed 7 years ago

pwalsh commented 7 years ago

Description

In prep for #46 I set up a CNAME for apps.openbudgets.eu to point to the Fraunhofer servers.

However, even with no configuration, the server will accept this domain and return a valid response, which, at time of writing, is:

{
  "site-map": "htt://localhost:5000/site-map",
  "whoami": "This is the data analysis mining backend of OpenBudgets.eu"
}

Ideally, we do not want anyone on the Internet to be able to point any domain at the server. The desired configuration would be to prevent such requests on the proxy server (nginx in this case).

Tasks

liyakun commented 7 years ago

@pwalsh I use the following setting to response to unknow domain request server { listen 80; server_name _; return 444; }