Skip to content

Commit 0ada6e3

Browse files
committed
Fix acme http challenge path
1 parent 07dc733 commit 0ada6e3

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

templates/config/nginx/default.conf.mustache

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -146,9 +146,18 @@ server {
146146
expires max;
147147
}
148148
# Security settings for better privacy
149-
# Deny hidden files
150-
location /.well-known {
149+
# Allow LetsEncrypt HTTP challenge URL
150+
location ^~ /.well-known/acme-challenge/ {
151+
auth_basic off;
151152
allow all;
153+
try_files $uri =404;
154+
break;
155+
}
156+
# Deny hidden files
157+
location ~ /\. {
158+
deny all;
159+
access_log off;
160+
log_not_found off;
152161
}
153162

154163
# Deny backup extensions & log files

0 commit comments

Comments
 (0)