加固部署配置与敏感路径拦截

2026-06-22 15:35:25 +08:00
parent 1fef12cd86
commit 79d2ee344c
3 changed files with 28 additions and 4 deletions
@@ -52,6 +52,12 @@ http {
            add_header Cache-Control "public, max-age=31536000, immutable" always;
        }

+        location ~* (^|/)(\.git|\.env($|[./_-])|wp-config\.php|config\.php|database\.yml|backup($|[._/-])) {
+            access_log off;
+            log_not_found off;
+            return 404;
+        }
+
        location /api/ {
            proxy_pass http://backend;
            proxy_set_header Host $host;