Nginx Config

Multi-Vendor Questions
1

Anyone know where to find the config file they reference in the security email they sent out related to Nginx?


To solve the problem, just use our latest Nginx configuration. Once you do this, change the admin panel URL, just in case.

Didn't see anything in github....

2

I already deleted the email but wasn't there a link to it?

3

Not that I saw... Doubt it was filtered out by spam detection...

4

Not that I saw... Doubt it was filtered out by spam detection...

On January 29th 2018 they changed one possible critical thing I noticed:

-   #   Blocking outside access to the store’s database backups (/var/database).
-       location ~ ^/(\w+/)?(\w+/)?var/database/ {
+   #   Blocking outside access to the store’s database backups (/var/backups).
+       location ~ ^/(\w+/)?(\w+/)?var/backups/ {
            return 404;
        }
5

Where did you find the file?

6

Here is the link to our latest nginx config that was in the email: https://docs.cs-cart.com/latest/install/nginx.html