From 084ee25fa9f6cb6017e547361994e7d02c4e14ef Mon Sep 17 00:00:00 2001
From: Sadiq Saif <staticsafe@users.noreply.github.com>
Date: Thu, 9 Nov 2017 16:07:57 -0500
Subject: [PATCH] Add some deny blocks to secure cache directories for tt-rss

---
 ubuntu/site.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ubuntu/site.yml b/ubuntu/site.yml
index dc1d962..58ad73c 100644
--- a/ubuntu/site.yml
+++ b/ubuntu/site.yml
@@ -235,6 +235,12 @@
         - ssl_stapling on
         - resolver 8.8.8.8 valid=300s
         - add_header Strict-Transport-Security max-age=31536000
+        - location /cache {
+            deny all;
+          }
+        - location = /config.php {
+            deny all;
+          }
         - location / {
             try_files $uri $uri/ /index.php?$args;
           }