boban
/
CluPilotCloud
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(nginx): the live hostnames were missing from the admin denylist
tests / pest (push) Successful in 6m56s Details
tests / assets (push) Successful in 21s Details
tests / release (push) Successful in 6s Details 

The map listed only *.dev.clupilot.com, with the production names commented out
under "add the real public hostnames here before launch". Launching without
them removes the outer of the two layers that keep /admin off the public
internet — the ADMIN_HOSTS check in the app would still answer 404, but the
whole point of the pair is that neither is relied on alone.

admin.clupilot.com stays out of the list on purpose: the list names the hosts
that are PUBLIC, and the console is not one of them.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
feat/portal-design tested-20260726-1705-9352935
nexxo 2026-07-26 18:43:44 +02:00
parent 35307e64cc
commit 9352935b88
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
..env.swp
View File

Binary file not shown.

7
docker/nginx/default.conf
View File

@ -13,9 +13,10 @@ map $host $admin_host_is_public {
app.dev.clupilot.com 1;
api.dev.clupilot.com 1;
ws.dev.clupilot.com 1;
# Production (add the real public hostnames here before launch):
# www.clupilot.com 1;
# app.clupilot.com 1;
www.clupilot.com 1;
app.clupilot.com 1;
api.clupilot.com 1;
ws.clupilot.com 1;
}
server {