mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-09-19 04:59:01 +00:00
Changes Apache conf files to use new mod_authz_host syntax instead of Allow/Deny
Resolves Issue https://github.com/freedombox/Plinth/issues/171 "Update Apache auth config directives"
This commit is contained in:
parent
45fd4f2a53
commit
1f183bf997
@ -8,5 +8,5 @@ Alias /jwchat /usr/share/jwchat/www
|
|||||||
ProxyPass /http-bind/ http://localhost:5280/http-bind/
|
ProxyPass /http-bind/ http://localhost:5280/http-bind/
|
||||||
ProxyPassReverse /http-bind/ http://localhost:5280/http-bind/
|
ProxyPassReverse /http-bind/ http://localhost:5280/http-bind/
|
||||||
<Proxy http://localhost:5280/http-bind/*>
|
<Proxy http://localhost:5280/http-bind/*>
|
||||||
Allow from all
|
Require all granted
|
||||||
</Proxy>
|
</Proxy>
|
||||||
|
|||||||
@ -13,14 +13,29 @@
|
|||||||
RequestHeader set X-Forwarded-Proto 'https' env=HTTPS
|
RequestHeader set X-Forwarded-Proto 'https' env=HTTPS
|
||||||
|
|
||||||
## Allow traffic only from private networks
|
## Allow traffic only from private networks
|
||||||
Order Deny,Allow
|
<RequireAny>
|
||||||
Deny from All
|
## IPv4 local addresses
|
||||||
Allow from 127.0.0.0/8 # IPv4 local addresses
|
Require ip 127.0.0.0/8
|
||||||
Allow from 169.254.0.0/16 # IPv4 link local addresses
|
|
||||||
Allow from 10.0.0.0/8 # IPv4 class A private addresses
|
## IPv4 link local addresses
|
||||||
Allow from 172.16.0.0/12 # IPv4 class B private addresses
|
Require ip 169.254.0.0/16
|
||||||
Allow from 192.168.0.0/16 # IPv4 class C private addresses
|
|
||||||
Allow from ::1 # IPv6 local address
|
## IPv4 class A private addresses
|
||||||
Allow from fe80::/10 # IPv6 link local addresses
|
Require ip 10.0.0.0/8
|
||||||
Allow from fc00::/7 # IPv6 private addresses
|
|
||||||
|
## IPv4 class B private addresses
|
||||||
|
Require ip 172.16.0.0/12
|
||||||
|
|
||||||
|
## IPv4 class C private addresses
|
||||||
|
Require ip 192.168.0.0/16
|
||||||
|
|
||||||
|
## IPv6 local address
|
||||||
|
Require ip ::1
|
||||||
|
|
||||||
|
## IPv6 link local addresses
|
||||||
|
Require ip fe80::/10
|
||||||
|
|
||||||
|
## IPv6 private addresses
|
||||||
|
Require ip fc00::/7
|
||||||
|
</RequireAny>
|
||||||
</Location>
|
</Location>
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user