fix: don't block txt/md in Drupal private filesystem

uselagoon · Apr 30, 2024 · cf1d1b7 · cf1d1b7
1 parent 1068b8d
commit cf1d1b7
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/images/nginx-drupal/drupal.conf b/images/nginx-drupal/drupal.conf
@@ -26,8 +26,9 @@ server {
       try_files $uri @drupal;
     }
 
-    ## Do not allow access to .txt and .md unless inside sites/*/files/
-    location ~* ^(?!.+sites\/.+\/files\/).+\.(txt|md)$ {
+    ## Do not allow access to .txt and .md unless inside public or private files
+    ## directories (sites/*/files and sytem/files)
+    location ~* ^(?!.+(?:sites\/.+|system)\/files\/).+\.(txt|md)$ {
       deny all;
       access_log off;
       log_not_found off;