dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

r/v-m-nginx: Prevent requesting reload 

Remote systems should not be able to trigger a reload of the services
behind the reverse proxy.
btop
Dustin 2022-08-12 13:14:05 -05:00
parent ce3e88932d
commit 1f04813879
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
roles/victoria-metrics-nginx/templates/victoria-metrics.nginx.conf.j2
View File

@ -7,6 +7,10 @@ server {
proxy_pass http://[::1]:8428/; proxy_pass http://[::1]:8428/;
client_max_body_size 100m; client_max_body_size 100m;
} }
location ~ /-/reload {
deny all;
}
{% for item in vm_nginx_proxy_paths %} {% for item in vm_nginx_proxy_paths %}
location {{ item.path }} { location {{ item.path }} {