From 1c4348aa8f655d4f78b426ea00b43d881aefc585 Mon Sep 17 00:00:00 2001
From: ericgaspar <junk.eg@free.fr>
Date: Tue, 22 Sep 2020 12:18:23 +0200
Subject: [PATCH] fix

---
 check_process   |  6 +++---
 conf/nginx.conf | 23 ++++++++++++++++++-----
 2 files changed, 21 insertions(+), 8 deletions(-)

diff --git a/check_process b/check_process
index 34045d5..898273c 100644
--- a/check_process
+++ b/check_process
@@ -6,9 +6,9 @@
 ;; Test complet
 	; Manifest
 		domain="domain.tld"	(DOMAIN)
-		path="/path"	(PATH)
-		admin="john"	(USER)
-		is_public=1	(PUBLIC|public=1|private=0)
+		path="/path"	    (PATH)
+		admin="john"	    (USER)
+		is_public=1	        (PUBLIC|public=1|private=0)
 		password="phrasedepasse"
 		language="fr"
 		ssoenabled="Yes"
diff --git a/conf/nginx.conf b/conf/nginx.conf
index 3171e5b..651f373 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -11,10 +11,6 @@ location __PATH__/ {
 	try_files $uri $uri/ /index.php;
 
 	location ~ [^/]\.php(/|$) {
-		if ($request_uri ~ "\/movim\/\?infos") {
-			return 403;
-		}
-
 		fastcgi_split_path_info ^(.+?\.php)(/.*)$;
 		fastcgi_pass unix:/var/run/php__PHPVERSION__-fpm-__NAME__.sock;
 		fastcgi_index index.php;
@@ -24,7 +20,7 @@ location __PATH__/ {
 		fastcgi_param SCRIPT_FILENAME $request_filename;
 	}
 
-	location /movim/ws/ {
+	location ~ ^__PATH__/ws/ {
 		proxy_pass         http://127.0.0.1:__PORT__;
 		proxy_http_version 1.1;
 		proxy_set_header   Upgrade $http_upgrade;
@@ -43,3 +39,20 @@ location __PATH__/ {
 	# Include SSOWAT user panel.
 	include conf.d/yunohost_panel.conf.inc;
 }
+
+
+location ~ /\.ht {
+	deny all;
+}
+
+location ^~ /movim/log/ {
+	return 403;
+}
+
+location ^~ /movim/config/ {
+	return 403;
+}
+
+location ^~ /movim/?infos {
+	return 403;
+}