From f9dca2deff7a28d97c7a210b3d03c55112b0ce6c Mon Sep 17 00:00:00 2001 From: status404 Date: Thu, 2 Jul 2026 12:32:39 +0300 Subject: [PATCH] Block MS from the public entry --- docker/haproxy.cfg | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/docker/haproxy.cfg b/docker/haproxy.cfg index ce78381..22590a3 100644 --- a/docker/haproxy.cfg +++ b/docker/haproxy.cfg @@ -27,9 +27,7 @@ frontend http use_backend certbot if certbot # # Fool-proof: MS has no auth — never expose /ms publicly. -# acl is_ms path -i /ms -# acl is_ms path_beg -i /ms/ -# http-request deny deny_status 404 if is_ms +# http-request deny deny_status 404 if { path -i /ms } || { path -i -m beg /ms/ } frontend https bind *:443 ssl crt /usr/local/etc/haproxy/certificates/site.pem @@ -40,9 +38,7 @@ frontend https use_backend certbot if certbot # # Fool-proof: MS has no auth — never expose /ms publicly. -# acl is_ms path -i /ms -# acl is_ms path_beg -i /ms/ -# http-request deny deny_status 404 if is_ms +# http-request deny deny_status 404 if { path -i /ms } || { path -i -m beg /ms/ } backend default-backend-http http-request set-header X-Forwarded-Proto https if { ssl_fc }