GitHub linguist .yml, fail2ban config fixes

2020-09-25 11:41:15 -04:00
parent 770be0ef4b
commit 3b4ad7c45c
4 changed files with 10 additions and 2 deletions
--- a/ansible/roles/http/templates/nginx/sites/ci.bdebyl.net.https.conf.j2
+++ b/ansible/roles/http/templates/nginx/sites/ci.bdebyl.net.https.conf.j2
@@ -8,6 +8,9 @@ server {
  server_name {{ ci_server_name }};

  add_header              Strict-Transport-Security max-age=6307200;
+  add_header              Allow "GET, POST, HEAD" always;
+
+  limit_except GET POST { deny all; }

  ssl_certificate         /etc/letsencrypt/live/{{ ci_server_name }}/fullchain.pem;
  ssl_certificate_key     /etc/letsencrypt/live/{{ ci_server_name }}/privkey.pem;