forked from evolix/ansible-roles
apache : fix goaway pattern for bad bots
This commit is contained in:
parent
1394052fd6
commit
b1a67d1a5c
|
@ -24,6 +24,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
|
|||
* add-vm.sh: allow VM name max length > 20
|
||||
* nagios: rename var `nagios_nrpe_process_processes` into `nagios_nrpe_processes` and check systemd-timesyncd instead of ntpd in Debian 12
|
||||
* ProFTPd: in SFTP vhost, enable SSH keys login, enable ed25549 host key for Debian >= 11
|
||||
* apache : fix goaway pattern for bad bots
|
||||
|
||||
### Fixed
|
||||
|
||||
|
|
|
@ -40,13 +40,10 @@ MaxKeepAliveRequests 10
|
|||
</IfModule>
|
||||
</IfModule>
|
||||
|
||||
|
||||
<Directory /home/>
|
||||
AllowOverride None
|
||||
Require all granted
|
||||
# "Require not env XXX" is not supported :(
|
||||
Deny from env=GoAway
|
||||
</Directory>
|
||||
# Go away bad bots (define "bad bots" in zzz-evolinux-custom.conf)
|
||||
<If "reqenv('GoAway') -eq 1">
|
||||
Require all denied
|
||||
</If>
|
||||
|
||||
<DirectoryMatch "/\.git">
|
||||
# We don't want to let the client know a file exist on the server,
|
||||
|
|
Loading…
Reference in a new issue