Nginx: Multiple PHP sites in sub-directories

Question

I've been pulling my hair out for hours now.

My [statamic CMS] sites are running in subdirectories on a staging server.

I'm using and NGINX conf provided by Statamic:

Which I've modified like so:

All is working but...

...when I navigate to domain.com/site1/_config/users/admin.yaml I can download the file without restriction!(!!)

The NGINX config line in question is:

location ~ /.(yml|yaml|html) { deny all; }

I've tried the following but no luck:

location ~ /(site1|site2|site3)/.+\.(yml|yaml|html) { deny all; }

To be honest I'm a complete n00b at NGINX, and it's proving much more difficult to use than Apache.

So my question is how do I modify the above statement to restrict access to the .yaml and .html files?

Thanks.

LM

Tan Hong Tat · Accepted Answer · 2014-07-18 08:42:06Z

2

Give this a try. It requires a $ to match end of string.

location ~* (?:\.(?:yml|yaml|html)|~)$ {
    deny all;
}

answered Jul 18, 2014 at 8:42

Tan Hong Tat

6,9092 gold badges29 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

EDIT: Working! Sorry, forgot to clear the cache. Thanks!