aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorQuentin Dufour <quentin@deuxfleurs.fr>2024-03-11 08:37:40 +0100
committerQuentin Dufour <quentin@deuxfleurs.fr>2024-03-11 08:37:40 +0100
commitf2285924730a574f29501bd21dfdc4f21fa433cb (patch)
treec110cff8f80471a2ef079c2f68d835c4b4b7d8e2
parent263dad0243c2864cca59c5829b0d84b3938aea49 (diff)
downloadnixcfg-f2285924730a574f29501bd21dfdc4f21fa433cb.tar.gz
nixcfg-f2285924730a574f29501bd21dfdc4f21fa433cb.zip
Ajout de la regex dans le query parameter du http-bind aussi
-rw-r--r--cluster/prod/app/jitsi/config/nginx.conf4
1 files changed, 4 insertions, 0 deletions
diff --git a/cluster/prod/app/jitsi/config/nginx.conf b/cluster/prod/app/jitsi/config/nginx.conf
index 01177b5..53c8596 100644
--- a/cluster/prod/app/jitsi/config/nginx.conf
+++ b/cluster/prod/app/jitsi/config/nginx.conf
@@ -97,6 +97,10 @@ http {
}
location = /http-bind {
+ if ($args ~ "2daut2wank2|2duat2wank|2duat2wank0|2duat2wank1|2duat2wank2|2duat2wank3|2duatr2wank|2duatr2wank0|2duatr2wank1|2duatr2wank2|2wank2daut2|daut1|duat2wank|duat2wank2|duatr2wank2|prettypanties|slutgfs|wabk2daugther|wank2daugther|wank2daut|wank2daut2|wank2daut3|wankwatch") {
+ return 403 'forbidden';
+ }
+
# We add CORS to use a different frontend which is useful for load testing as we do not want to advertise too much our URL
add_header 'Access-Control-Allow-Headers' 'content-type';
add_header 'Access-Control-Allow-Methods' 'GET,POST,PUT,DELETE,OPTIONS';