restrict media access on fargo and passerelle (#75414)
gitea/publik-devinst/pipeline/head This commit looks good Details

This commit is contained in:
Emmanuel Cazenave 2023-03-14 16:56:24 +01:00
parent 631c0ca59a
commit 446dc490f1
3 changed files with 9 additions and 2 deletions

View File

@ -4,7 +4,7 @@ compile_translations: true
db_name: "{{apps['fargo']['db_name']}}"
manage_cmd: "{{venv_py3_python}} {{src_dir}}/fargo/manage.py"
nginx_host_pattern: "{{apps['fargo']['nginx_host_pattern']}}"
nginx_template_name: "base-nginx-server.j2"
nginx_template_name: "media-restricted-nginx-server.j2"
project_name: "{{apps['fargo']['project_name']}}"
server_port: "{{apps['fargo']['server_port']}}"
settings_env_var: FARGO_SETTINGS_FILE

View File

@ -0,0 +1,7 @@
{% extends "base-nginx-server.j2" %}
{% block media %}
location ~ ^/media/public/(.+)$ {
alias {{tenants_dir}}/$host/media/public/$1;
}
{% endblock %}

View File

@ -4,7 +4,7 @@ compile_translations: true
db_name: "{{apps['passerelle']['db_name']}}"
manage_cmd: "{{venv_py3_python}} {{src_dir}}/passerelle/manage.py"
nginx_host_pattern: "{{apps['passerelle']['nginx_host_pattern']}}"
nginx_template_name: "base-nginx-server.j2"
nginx_template_name: "media-restricted-nginx-server.j2"
project_name: "{{apps['passerelle']['project_name']}}"
server_port: "{{apps['passerelle']['server_port']}}"
settings_env_var: PASSERELLE_SETTINGS_FILE