From e2be6fb0b4d518637c4e580a2adbeb0c97156977 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Josu=C3=A9=20Tille?= <josue@tille.ch>
Date: Tue, 14 May 2019 17:42:24 +0200
Subject: [PATCH] Nginx config - Protect unnecessary path

---
 conf/nginx.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/conf/nginx.conf b/conf/nginx.conf
index 86915f6..dc1c65d 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -13,6 +13,10 @@ location __PATH__/ {
   # Common parameter to increase upload size limit in conjuction with dedicated php-fpm file
   client_max_body_size 50M;
 
+  # Protect all not necessary files
+  location ~ (/templates/|(?<!js/syntaxhighlighter)\/scripts/|/lib/|/po/|/locale/|(?<!admin)\/config\/) {
+    deny all;
+  }
   try_files $uri $uri/ index.php;
   location ~ [^/]\.php(/|$) {
     fastcgi_split_path_info ^(.+?\.php)(/.*)$;