Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP

Loading…

Can you help me / us / all with b&m ? #66

Closed
killua99 opened this Issue · 4 comments

2 participants

@killua99

The issue is this one.

http://drupal.org/node/1007178

And I (and we) need to know how to handle the file access. You use this module?

Regards.

@perusio
Owner

You want to block direct access to the directories? I presume there's a /backup in the path?

This should do:

location ^~ /backup {
    internal;
}

I don't use this module. But I can install it and try it out, if needed to sort this out.

@perusio perusio was assigned
@killua99

If you have time to try it could be great! :D

Thanks for the advice as always!

@perusio
Owner

I did. I installed the D7 version. I just used the default settings. The manual backup directory was created under my private file system (which is private). I added this to the config:

location ^~ /private/ {
      internal;
 } 

Before:

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 11 Oct 2012 22:20:17 GMT
Content-Type: application/octet-stream
Content-Length: 597258
Last-Modified: Thu, 11 Oct 2012 22:15:47 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "50774513-91d0a"
X-Frame-Options: sameorigin
Accept-Ranges: bytes

After adding the above piece of config:

HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 11 Oct 2012 22:20:45 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Keep-Alive: timeout=10
Vary: Accept-Encoding

I suggest you install nginx_accel_redirect. It will give config suggestions to protect the private filesystem.

If you just want to protect the backup_migrate backup dir and nothing more do:

location ^~ /backup_migrate/ {
    internal;
}
@killua99

Thanks you! This is great!

Appreciate!

Regards

@perusio perusio closed this
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.