Commit 64fb524b authored by Sebastien Robin's avatar Sebastien Robin

testnode: disallow frontend access to all folders, avoiding publishing private repositories

Same issue of avoiding publishing private code, this time with nothing published by default.

Ivan, can you quickly try this apache config and give your opinion if it acceptable that you add .htaccess in the code to be tested ?

/cc @jm @Tyagov @rafael

/reviewed-on !113
parent e20db270
...@@ -22,7 +22,6 @@ Header set Access-Control-Allow-Origin "*" ...@@ -22,7 +22,6 @@ Header set Access-Control-Allow-Origin "*"
# List of modules # List of modules
LoadModule unixd_module modules/mod_unixd.so LoadModule unixd_module modules/mod_unixd.so
LoadModule access_compat_module modules/mod_access_compat.so
LoadModule authz_core_module modules/mod_authz_core.so LoadModule authz_core_module modules/mod_authz_core.so
LoadModule authz_host_module modules/mod_authz_host.so LoadModule authz_host_module modules/mod_authz_host.so
LoadModule log_config_module modules/mod_log_config.so LoadModule log_config_module modules/mod_log_config.so
...@@ -68,19 +67,21 @@ SSLProxyEngine On ...@@ -68,19 +67,21 @@ SSLProxyEngine On
<Directory /> <Directory />
Options Indexes FollowSymLinks Options Indexes FollowSymLinks
IndexOptions FancyIndexing IndexOptions FancyIndexing
order allow,deny Require all granted
Allow from All
</Directory> </Directory>
</VirtualHost> </VirtualHost>
# IMPORTANT NOTE: It is very important to deny access by default, otherwise this
# open access to private repositories. If someone would like to open access to
# some code, it would be needed to explicitely add a .htaccess file.
Listen [%(ip)s]:%(software_access_port)s Listen [%(ip)s]:%(software_access_port)s
<VirtualHost *:%(software_access_port)s> <VirtualHost *:%(software_access_port)s>
SSLEngine on SSLEngine on
DocumentRoot "%(testnode_srv_directory)s" DocumentRoot "%(testnode_srv_directory)s"
<Directory /> <Directory />
AllowOverride FileInfo AuthConfig
Options FollowSymLinks Options FollowSymLinks
IndexOptions FancyIndexing IndexOptions FancyIndexing
order allow,deny Require all denied
Allow from All
</Directory> </Directory>
</VirtualHost> </VirtualHost>
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment