Tobias Hallmen a683019198 Git-bridge: nginx: only expose git-bridge project endpoints under /git/ (#260) ...

The /git/ location proxied every path to git-bridge, which made its
internal routes reachable from the internet: /status, /health_check,
/metrics, /diags, /api/<project>/<key>/postback and the unauthenticated
DELETE /api/projects/<project id> used by web on project expiry.

Forward only /git/<24 hex project id>[.git]/... (the git smart-HTTP
endpoints, which git-bridge protects with Oauth2Filter) and return 404
for everything else under /git/. Web talks to git-bridge directly
(GIT_BRIDGE_HOST:GIT_BRIDGE_PORT), not through nginx, so it is not
affected.

2026-11-04 14:10:09 +01:00

..

clsi-nginx.conf

Add variables to enable experimental features: pandoc conversion and editor tabs

2026-09-22 02:41:43 +02:00

nginx.conf.template

Add MAX_UPLOAD_SIZE environment variable

2026-09-22 02:41:36 +02:00

overleaf.conf.template

Git-bridge: nginx: only expose git-bridge project endpoints under /git/ (#260)

2026-11-04 14:10:09 +01:00