work in progress for idaholab#331, improvements to extracted_files_ht…

…tp_server.py and the setting/creation of ACL rules on hedgehog
mmguero-dev · Apr 1, 2024 · 5b2359c · 5b2359c
1 parent 6c0a9e7
commit 5b2359c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
@@ -199,6 +199,9 @@ http {
       proxy_set_header Host file-monitor.malcolm.local;
     }
 
+    # extracted file download hedgehog redirect
+    # TODO: this is not very secure: we need to validate somehow
+    #   that we're not just redirecting to some bad place
     location ~* ^/hh-extracted-files/([a-zA-Z0-9-\.]+)\b(.*) {
       include /etc/nginx/nginx_auth_rt.conf;
       set $upstream $1:8006;