Improve matomo protection, see matomo-org/matomo-nginx#84

alexandermeindl · alexandermeindl · commit 2767c42a5fdc · 2025-11-12T14:09:26.000+01:00
diff --git a/roles/matomo/templates/nginx/sites-available/matomo.j2 b/roles/matomo/templates/nginx/sites-available/matomo.j2
@@ -53,7 +53,7 @@ server {
 {% endif %}
 
   ## disable all access to the following directories
-  location ~ ^/(config|tmp|core|lang) {
+  location ~ ^/(console|config|tmp|core|lang) {
     deny all;
     return 403; # replace with 404 to not show these directories exist
   }

Original file line number	Diff line number	Diff line change
`@@ -53,7 +53,7 @@ server {`
`53`	`53`	`{% endif %}`
`54`	`54`
`55`	`55`	`## disable all access to the following directories`
`56`		`- location ~ ^/(config\|tmp\|core\|lang) {`
	`56`	`+ location ~ ^/(console\|config\|tmp\|core\|lang) {`
`57`	`57`	`deny all;`
`58`	`58`	`return 403; # replace with 404 to not show these directories exist`
`59`	`59`	`}`