Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Updated the Nginx configuration to explicitly allow access to the `.well-known` directory while maintaining the restriction for other hidden files and directories (e.g., `.htaccess`, `.htpasswd`). The `.well-known` directory is commonly used for domain verification and other standards-compliant purposes (e.g., Apple Pay’s `apple-developer-merchantid-domain-association` file). This change ensures that legitimate requests to `.well-known` resources are served while keeping other hidden files secure. Steps to Verify: 1. Place a test file (e.g., `.well-known/test-file`) in the web root. 2. Verify that the file is accessible at `http://yourdomain.com/.well-known/test-file`. 3. Confirm that other hidden files (e.g., `.htaccess`) remain inaccessible. Changes Made: - Modified the existing `location ~ /\.` block to ensure `.well-known` is accessible. - The updated configuration maintains the deny rule for all other hidden files and directories, preserving security.
- Loading branch information