Add configuration to block access to hidden files in nginx

2026-03-31 17:50:00 +01:00 · 2026-03-31 17:50:00 +01:00 · 1984e64ccd
commit 1984e64ccd
parent c22dd91556
5 changed files with 42 additions and 0 deletions
--- a/nginx.conf
+++ b/nginx.conf
@ -47,6 +47,12 @@ http {
            add_header Cache-Control "public";
        }

+        # Block access to hidden files (especially .git)
+        location ~ /\. {
+            deny all;
+            return 404;
+        }
+
        # Health check
        location = /api/health {
            proxy_pass http://outline;