kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests 1 Releases Activity

block access to the go /debug/pprof/ endpoint

Browse source
This commit is contained in:
Franzi 2022-08-19 07:26:01 +02:00
parent 0113b9a565
commit aa5c7ff8b4
Signed by: kunsi
GPG key ID: 12E3D2136B818350
4 changed files with 15 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
bundles/gitea/metadata.py
View file

@ -82,6 +82,9 @@ def nginx(metadata):
'/': { '/': {
'target': 'http://127.0.0.1:22000', 'target': 'http://127.0.0.1:22000',
}, },
'/debug': {
'return': 403,
},
}, },
'website_check_path': '/user/login', 'website_check_path': '/user/login',
'website_check_string': 'Sign In', 'website_check_string': 'Sign In',

6
bundles/matrix-synapse/metadata.py
View file

@ -89,7 +89,7 @@ def nginx(metadata):
wellknown = { wellknown = {
'/.well-known/matrix/client': { '/.well-known/matrix/client': {
'return': dumps({ 'content': dumps({
'm.homeserver': { 'm.homeserver': {
'base_url': 'https://{}'.format(metadata.get('matrix-synapse/baseurl')), 'base_url': 'https://{}'.format(metadata.get('matrix-synapse/baseurl')),
}, },
@ -98,15 +98,17 @@ def nginx(metadata):
}, },
**metadata.get('matrix-synapse/additional_client_config', {}), **metadata.get('matrix-synapse/additional_client_config', {}),
}, sort_keys=True), }, sort_keys=True),
'return': 200,
'additional_config': { 'additional_config': {
'default_type application/json', 'default_type application/json',
'add_header Access-Control-Allow-Origin *', 'add_header Access-Control-Allow-Origin *',
}, },
}, },
'/.well-known/matrix/server': { '/.well-known/matrix/server': {
'return': dumps({ 'content': dumps({
'm.server': '{}:443'.format(metadata.get('matrix-synapse/baseurl')), 'm.server': '{}:443'.format(metadata.get('matrix-synapse/baseurl')),
}, sort_keys=True), }, sort_keys=True),
'return': 200,
'additional_config': { 'additional_config': {
'default_type application/json', 'default_type application/json',
'add_header Access-Control-Allow-Origin *', 'add_header Access-Control-Allow-Origin *',

6
bundles/nginx/files/site_template
View file

@ -122,7 +122,11 @@ server {
% elif 'redirect' in options: % elif 'redirect' in options:
return ${options.get('mode', 308)} ${options['redirect']}; return ${options.get('mode', 308)} ${options['redirect']};
% elif 'return' in options: % elif 'return' in options:
return ${options.get('mode', 200)} '${options['return']}'; % if options.get('content'):
return ${options['return']} '${options['content']}';
% else:
return ${options['return']};
% endif
% elif 'root' in options: % elif 'root' in options:
root ${options['root']}; root ${options['root']};
% elif 'alias' in options: % elif 'alias' in options:

3
nodes/htz-cloud/influxdb.py
View file

@ -47,6 +47,9 @@ nodes['htz-cloud.influxdb'] = {
'target': 'http://localhost:8086', 'target': 'http://localhost:8086',
'websockets': True, 'websockets': True,
}, },
'/debug': {
'return': 403,
},
}, },
}, },
}, },