From: Tom Hughes <tom@compton.nu>
Date: Mon, 21 Mar 2022 00:47:04 +0000 (+0000)
Subject: Block access to some piwik internals
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/9e1072b81773c74906d629c8235fdae6d84a3786

Block access to some piwik internals
---

diff --git a/cookbooks/piwik/templates/default/apache.erb b/cookbooks/piwik/templates/default/apache.erb
index f513ce9c2..f1278a31f 100644
--- a/cookbooks/piwik/templates/default/apache.erb
+++ b/cookbooks/piwik/templates/default/apache.erb
@@ -15,6 +15,11 @@
 	Options -Indexes
 
 	DocumentRoot /srv/piwik.openstreetmap.org
+
+	Redirect 403 /core/
+	Redirect 403 /config/
+	Redirect 403 /lang/
+	Redirect 403 /tmp/
 </VirtualHost>
 
 <VirtualHost *:80>