From 987e283677bde3d3f5926655a4673fb38961d08b Mon Sep 17 00:00:00 2001 From: supahgreg Date: Sun, 5 Oct 2025 19:53:08 +0000 Subject: Switch to GitHub format for alerts/notifications. --- Securing-Cache-Directories.md | 80 +++++++++++++++++++++---------------------- 1 file changed, 40 insertions(+), 40 deletions(-) (limited to 'Securing-Cache-Directories.md') diff --git a/Securing-Cache-Directories.md b/Securing-Cache-Directories.md index b78cafc..15dba7a 100644 --- a/Securing-Cache-Directories.md +++ b/Securing-Cache-Directories.md @@ -1,40 +1,40 @@ -# Securing Cache Directories - -!!! notice - - Official container images restrict `/cache` access by default. This page applies only to - legacy host installations. - -While nothing critical is stored in cache directories by tt-rss nor do files -have easily guessable names, you may consider forbidding external access over -HTTP to these directories anyway. This is not required, however. - -You may also consider restricting access to config.php, just in case. - -## Using nginx - -```nginx -location /tt-rss/cache { - deny all; -} - -location = /tt-rss/config.php { - deny all; -} -``` - -Note: official docker setup has this out of the box. - -## Using apache (2.4 syntax) - -```apache - - Require all denied - - - - - Require all denied - - -``` +# Securing Cache Directories + +[!NOTE] + + Official container images restrict `/cache` access by default. This page applies only to + legacy host installations. + +While nothing critical is stored in cache directories by tt-rss nor do files +have easily guessable names, you may consider forbidding external access over +HTTP to these directories anyway. This is not required, however. + +You may also consider restricting access to config.php, just in case. + +## Using nginx + +```nginx +location /tt-rss/cache { + deny all; +} + +location = /tt-rss/config.php { + deny all; +} +``` + +Note: official docker setup has this out of the box. + +## Using apache (2.4 syntax) + +```apache + + Require all denied + + + + + Require all denied + + +``` -- cgit v1.2.3-54-g00ecf