Add warning about vhost protection in config files (#2109)

This commit is contained in:
Maxime Besson 2020-04-24 15:20:09 +02:00
parent e607d8281f
commit f4bca12ab7
4 changed files with 24 additions and 1 deletions

View File

@ -62,6 +62,12 @@
DocumentRoot __MANAGERAPIDIR__
<Location />
# By default, access to this VHost is denied
# If you want to enable the manager APIs, you MUST
# implement a robust authentication scheme to protect this
# VHost since LemonLDAP::NG provides no protection to the
# Manager APIs yet
Require all denied
<IfModule mod_deflate.c>

View File

@ -62,6 +62,12 @@
DocumentRoot __MANAGERAPIDIR__
<Location />
# By default, access to this VHost is denied
# If you want to enable the manager APIs, you MUST
# implement a robust authentication scheme to protect this
# VHost since LemonLDAP::NG provides no protection to the
# Manager APIs yet
<IfVersion >= 2.3>
Require all denied
</IfVersion>

View File

@ -62,6 +62,12 @@
DocumentRoot __MANAGERAPIDIR__
<Location />
# By default, access to this VHost is denied
# If you want to enable the manager APIs, you MUST
# implement a robust authentication scheme to protect this
# VHost since LemonLDAP::NG provides no protection to the
# Manager APIs yet
Order Deny,Allow
Deny from all

View File

@ -37,7 +37,12 @@ server {
# Uncomment this if you use https only
#add_header Strict-Transport-Security "max-age=15768000";
# Access control
# By default, access to this VHost is denied
# If you want to enable the manager APIs, you MUST
# implement a robust authentication scheme to protect this
# VHost since LemonLDAP::NG provides no protection to the
# Manager APIs yet
#
#allow 127.0.0.0/8;
#allow ::1/128;
deny all;