diff --git a/static/nginx/site.conf b/static/nginx/site.conf index 621ca2a..f9fb8ff 100755 --- a/static/nginx/site.conf +++ b/static/nginx/site.conf @@ -53,6 +53,16 @@ server { expires 5d; } + # hotfix for info disclosure + location ~* \.(ini)$ { + log_not_found off; + deny all; + } + location ~* \.(log)$ { + log_not_found off; + deny all; + } + # deny access to . files, for security # location ~ /\. {