fix(security): nginx.conf 增加安全策略

2024-12-21 20:47:10 +08:00 · 2024-12-15 00:05:59 +08:00 · 2024-12-15 00:05:59 +08:00 · a261ab79c9
commit a261ab79c9
parent 3aea300502
1 changed files with 5 additions and 0 deletions
--- a/docker/pig-ui.conf
+++ b/docker/pig-ui.conf
@ -28,4 +28,9 @@ server {
        proxy_set_header Host $http_host;
        proxy_set_header from "";
    }
+
+    # 屏蔽所有敏感路径，不用改代码
+    location ~* ^/(actuator|swagger-ui|v3/api-docs|swagger-resources|webjars|doc.html) {
+        return 403; # 禁止访问
+    }
 }