22 lines
646 B
ApacheConf
22 lines
646 B
ApacheConf
|
# Disable multiviews (conflicts with /admin/plugin.php) and index (security)
|
||
|
|
Options -MultiViews -Indexes
|
||
|
|
DirectoryIndex disabled
|
||
|
|
DirectoryIndex index.php index.html
|
||
|
|
|
||
|
|
# Prevents access to these urls
|
||
|
|
<IfModule mod_alias.c>
|
||
|
|
RedirectMatch 403 /include/
|
||
|
|
RedirectMatch 403 /templates/
|
||
|
|
RedirectMatch 403 ^/scripts/
|
||
|
|
RedirectMatch 403 /data/
|
||
|
|
RedirectMatch 403 /.*\.log
|
||
|
|
RedirectMatch 403 /(README|VERSION|COPYING|Makefile|cron\.php)
|
||
|
|
RedirectMatch 403 /config\.(.*)\.php
|
||
|
|
RedirectMatch 403 /sous-domaine\.html
|
||
|
|
RedirectMatch 403 _inc\.php
|
||
|
|
</IfModule>
|
||
|
|
|
||
|
|
# Assumes a reverse proxy provides https
|
||
|
|
SetEnv HTTPS "on"
|
||
|
|
SetEnv HTTP_X_FORWARDED_PROTO "https"
|