Actually fix letsencrypt issue.
This commit is contained in:
1 parent
54b640aef0
commit
ed7cd764be
3 files changed
+9
-2
No files matched your search
@@ -53,6 +53,7 @@ fn-ga-generate-conf "$APP" >"$CONF" || fail "conf generation failed"
|
||||
|
||||
grep -q 'proxy_pass http://myapp-5000;' "$CONF" || fail "conf should proxy to the app upstream"
|
||||
grep -q 'auth_request /_google-auth/verify;' "$CONF" || fail "conf should gate with auth_request"
|
||||
grep -qF 'location ~ ^/(?!\.well-known/acme-challenge(/|$)) {' "$CONF" || fail "catch-all should leave the letsencrypt challenge path alone"
|
||||
grep -q 'location ^~ /api/webhooks {' "$CONF" || fail "conf should contain prefix exclusion"
|
||||
grep -q 'location ~ ^/healthz$ {' "$CONF" || fail "conf should contain regex exclusion"
|
||||
grep -q 'error_page 401 = @google_auth_signin;' "$CONF" || fail "conf should redirect 401s to signin"
|
||||
|
||||
Reference in new issue
Block a user