diff options
| author | Paul Sokolovsky <paul.sokolovsky@linaro.org> | 2014-08-26 15:49:45 +0300 |
|---|---|---|
| committer | Paul Sokolovsky <paul.sokolovsky@linaro.org> | 2014-08-26 15:49:45 +0300 |
| commit | a011bb70a95f6507080c2221b17db5eff31ed573 (patch) | |
| tree | 698cf506ccce12cc7b58b06bb7ffc4bb4b7a5d5f | |
| parent | 29b9efaeb17cf5c0945f0373c0302fffea148c94 (diff) | |
ansible: gitweb: Use of git:// protocol is discouraged, don't show it.
We have much less frequent, but recurring cases of DoS sue to users using
git:// protocol. Re-adjust clone URL list in gitweb to adhere to
git:// discouragement policy by not showing it. Internal users who really
need to use it, can just replace http:// clone URL with git:// .
Change-Id: Ib07ee5b58fb79d552a8d34ed03eaf29e40bc35b8
| -rw-r--r-- | ansible/roles/gitweb/templates/gitweb.conf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ansible/roles/gitweb/templates/gitweb.conf b/ansible/roles/gitweb/templates/gitweb.conf index 04b6a4a..322c754 100644 --- a/ansible/roles/gitweb/templates/gitweb.conf +++ b/ansible/roles/gitweb/templates/gitweb.conf @@ -16,7 +16,7 @@ $projects_list = $projectroot; {% else %} {% if role == "public" %} $projects_list = "/home/{{ git_user }}/projects.list"; -@git_base_url_list = ("http://{{ git_host }}", "http://{{ git_host }}/git-ro", "git://{{ git_host }}", "ssh://{{ git_user }}\@{{ git_host }}"); +@git_base_url_list = ("http://{{ git_host }}", "http://{{ git_host }}/git-ro", "ssh://{{ git_user }}\@{{ git_host }}"); $export_ok = "git-daemon-export-ok"; $strict_export = 1; {% elif role == "private" %} |