deny requests to ^/evolinux_fpm_status-.*
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
3709808fdc
commit
df9db31725
|
@ -22,6 +22,7 @@ The **patch** part changes incrementally at each release.
|
||||||
### Changed
|
### Changed
|
||||||
|
|
||||||
* apache: rotate logs daily instead of weekly
|
* apache: rotate logs daily instead of weekly
|
||||||
|
* apache: deny requests to ^/evolinux_fpm_status-.*
|
||||||
* certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
|
* certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
|
||||||
* cerbot: use the legacy script on Debian 8 and 9
|
* cerbot: use the legacy script on Debian 8 and 9
|
||||||
* evoacme: upstream release 21.01
|
* evoacme: upstream release 21.01
|
||||||
|
|
|
@ -9,16 +9,19 @@ StartServers 50
|
||||||
MinSpareServers 20
|
MinSpareServers 20
|
||||||
MaxSpareServers 30
|
MaxSpareServers 30
|
||||||
MaxRequestsPerChild 0
|
MaxRequestsPerChild 0
|
||||||
|
|
||||||
<Directory /home/>
|
<Directory /home/>
|
||||||
AllowOverride None
|
AllowOverride None
|
||||||
Require all granted
|
Require all granted
|
||||||
# "Require not env XXX" is not supported :(
|
# "Require not env XXX" is not supported :(
|
||||||
Deny from env=GoAway
|
Deny from env=GoAway
|
||||||
</Directory>
|
</Directory>
|
||||||
|
|
||||||
<IfModule mod_ssl.c>
|
<IfModule mod_ssl.c>
|
||||||
SSLProtocol all -SSLv2 -SSLv3
|
SSLProtocol all -SSLv2 -SSLv3
|
||||||
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4
|
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4
|
||||||
</IfModule>
|
</IfModule>
|
||||||
|
|
||||||
<Files ~ "\.(inc|bak)$">
|
<Files ~ "\.(inc|bak)$">
|
||||||
Require all denied
|
Require all denied
|
||||||
</Files>
|
</Files>
|
||||||
|
@ -31,6 +34,10 @@ SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!RC4
|
||||||
</IfModule>
|
</IfModule>
|
||||||
|
|
||||||
<IfModule mpm_itk.c>
|
<IfModule mpm_itk.c>
|
||||||
LimitUIDRange 0 6000
|
LimitUIDRange 0 6000
|
||||||
LimitGIDRange 0 6000
|
LimitGIDRange 0 6000
|
||||||
</IfModule>
|
</IfModule>
|
||||||
|
|
||||||
|
<LocationMatch "^/evolinux_fpm_status-.*">
|
||||||
|
Require all denied
|
||||||
|
</LocationMatch>
|
||||||
|
|
Loading…
Reference in a new issue