uselagoon / lagoon

Lagoon, the developer-focused application delivery platform
https://docs.lagoon.sh/
Apache License 2.0
548 stars 147 forks source link

Docs: clarify dotfile access #3712

Open AlannaBurke opened 2 months ago

AlannaBurke commented 2 months ago

update these docs: https://docs.lagoon.sh/applications/drupal/services/nginx/#included-drupal-configuration-drupalconf

request: can we add a hint regarding the access to dotfiles ( #https://github.com/uselagoon/lagoon-images/blob/45f037f04fa43342305a8006128ff56d0665775e/images/nginx-drupal/drupal.conf#L40-L43)?

re this ticket: https://amazeeio.atlassian.net/browse/AIOSD-12255?atlOrigin=eyJpIjoiMzM3Nzc4NWRlODQzNDgzMzk3N2MxYjQ0YTgxYTQ5MTYiLCJwIjoiaGFscC1zbGFjayJ9

from slack convo:

The path was (from the ticket) /.well-known/apple-developer-merchantid-domain-association Perhaps /.well-known/ should not be blocked by Nginx, that would make sense to be honest. The main point of that rule is to block stuff like /.aws/credentials.yml etc