tilecache: limit supported request methods
authorGrant Slater <git@firefishy.com>
Sun, 24 Nov 2019 20:44:36 +0000 (20:44 +0000)
committerGrant Slater <git@firefishy.com>
Sun, 24 Nov 2019 20:44:36 +0000 (20:44 +0000)
cookbooks/tilecache/templates/default/nginx_tile.conf.erb

index 6e964e1..bc41ffb 100644 (file)
@@ -105,6 +105,11 @@ server {
     # See: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_early_data
     ssl_early_data on;
 
+    # Only allow GET / HEAD / OPTIONS (CORS) requests
+    limit_except GET HEAD OPTIONS {
+      deny all;
+    }
+
     # Immediately 404 layers we do not support
 <% for i in 20..99 do %>
     location /<%= i %>/ {