Skip to content

Update default.conf.sample to deny dotfile access - #533

Open
nemchik wants to merge 3 commits into
masterfrom
deny-dotfile-access
Open

Update default.conf.sample to deny dotfile access#533
nemchik wants to merge 3 commits into
masterfrom
deny-dotfile-access

Conversation

@nemchik

Copy link
Copy Markdown
Member

No description provided.

Signed-off-by: Eric Nemchik <eric@nemchik.com>
@LinuxServer-CI

Copy link
Copy Markdown
Collaborator

This pull request has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions.

@LinuxServer-CI

Copy link
Copy Markdown
Collaborator

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/nextcloud/33.0.2-pkg-9b48ead1-dev-33a2c06343da881b38531037af0dafd88a0104f2-pr-533/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/33.0.2-pkg-9b48ead1-dev-33a2c06343da881b38531037af0dafd88a0104f2-pr-533/shellcheck-result.xml

TagPassed
amd64-33.0.2-pkg-9b48ead1-dev-33a2c06343da881b38531037af0dafd88a0104f2-pr-533
arm64v8-33.0.2-pkg-9b48ead1-dev-33a2c06343da881b38531037af0dafd88a0104f2-pr-533

Removed duplicate configuration for the '.well-known' directory.
CopilotAI review requested due to automatic review settings May 4, 2026 20:50
@LinuxServer-CILinuxServer-CI moved this from PRs to PRs Ready For Team Review in Issue & PR TrackerMay 4, 2026

CopilotAI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Nextcloud container’s default nginx sample config to harden access controls around dotfiles, and records the change in the generated README changelog for users who maintain their own copied nginx config.

Changes:

  • Replaced the old .ht*-specific nginx deny rule with a broader dotfile-matching location block.
  • Added logging suppression and an explicit 404 response for denied dotfile requests.
  • Added a changelog entry in readme-vars.yml telling existing users to update their nginx config.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

FileDescription
root/defaults/nginx/site-confs/default.conf.sampleExpands the nginx deny rule from .ht* files to dotfiles generally.
readme-vars.ymlAdds the corresponding changelog note for existing users.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment threadroot/defaults/nginx/site-confs/default.conf.sample Outdated
@LinuxServer-CILinuxServer-CI moved this from PRs Ready For Team Review to PRs in Issue & PR TrackerMay 4, 2026
@LinuxServer-CI

Copy link
Copy Markdown
Collaborator

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/nextcloud/33.0.3-pkg-222677c1-dev-f149f49c20351cccab8399e813600d6b5ebc4b4c-pr-533/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/33.0.3-pkg-222677c1-dev-f149f49c20351cccab8399e813600d6b5ebc4b4c-pr-533/shellcheck-result.xml

TagPassed
amd64-33.0.3-pkg-222677c1-dev-f149f49c20351cccab8399e813600d6b5ebc4b4c-pr-533
arm64v8-33.0.3-pkg-222677c1-dev-f149f49c20351cccab8399e813600d6b5ebc4b4c-pr-533

Signed-off-by: Eric Nemchik <eric@nemchik.com>
@LinuxServer-CI

Copy link
Copy Markdown
Collaborator

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/nextcloud/33.0.3-pkg-f36a9e04-dev-501cd2613d95800f93de39029349e011ed044870-pr-533/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/33.0.3-pkg-f36a9e04-dev-501cd2613d95800f93de39029349e011ed044870-pr-533/shellcheck-result.xml

TagPassed
amd64-33.0.3-pkg-f36a9e04-dev-501cd2613d95800f93de39029349e011ed044870-pr-533
arm64v8-33.0.3-pkg-f36a9e04-dev-501cd2613d95800f93de39029349e011ed044870-pr-533

@LinuxServer-CI

Copy link
Copy Markdown
Collaborator

I am a bot, here are the test results for this PR for commit 6badf01 :
https://ci-tests.linuxserver.io/lspipepr/nextcloud/33.0.5-pkg-b7a66439-dev-6badf01bb82cb6c1ad5141a7edc2fe402d505b55-pr-533/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/33.0.5-pkg-b7a66439-dev-6badf01bb82cb6c1ad5141a7edc2fe402d505b55-pr-533/shellcheck-result.xml

TagPassed
amd64-33.0.5-pkg-b7a66439-dev-6badf01bb82cb6c1ad5141a7edc2fe402d505b55-pr-533
arm64v8-33.0.5-pkg-b7a66439-dev-6badf01bb82cb6c1ad5141a7edc2fe402d505b55-pr-533

@LinuxServer-CI

Copy link
Copy Markdown
Collaborator

I am a bot, here are the test results for this PR for commit 78bcc3e :
https://ci-tests.linuxserver.io/lspipepr/nextcloud/34.0.1-pkg-f7046705-dev-78bcc3e8465f389ef004db7efb86149178d822ac-pr-533/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/34.0.1-pkg-f7046705-dev-78bcc3e8465f389ef004db7efb86149178d822ac-pr-533/shellcheck-result.xml

TagPassed
amd64-34.0.1-pkg-f7046705-dev-78bcc3e8465f389ef004db7efb86149178d822ac-pr-533
arm64v8-34.0.1-pkg-f7046705-dev-78bcc3e8465f389ef004db7efb86149178d822ac-pr-533

@LinuxServer-CI

Copy link
Copy Markdown
Collaborator

I am a bot, here are the test results for this PR for commit f94ba23 :
https://ci-tests.linuxserver.io/lspipepr/nextcloud/34.0.2-pkg-998da20b-dev-f94ba230df0b157f77a3903fb7cc19b2f725d868-pr-533/index.html
https://ci-tests.linuxserver.io/lspipepr/nextcloud/34.0.2-pkg-998da20b-dev-f94ba230df0b157f77a3903fb7cc19b2f725d868-pr-533/shellcheck-result.xml

TagPassed
amd64-34.0.2-pkg-998da20b-dev-f94ba230df0b157f77a3903fb7cc19b2f725d868-pr-533
arm64v8-34.0.2-pkg-998da20b-dev-f94ba230df0b157f77a3903fb7cc19b2f725d868-pr-533

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: PRs

Development

Successfully merging this pull request may close these issues.

3 participants

@nemchik@LinuxServer-CI