From 070f79f7c88a66dbe4eddaab6058c7b0877e1c8c Mon Sep 17 00:00:00 2001
From: Christian Boltz <cboltz@opensuse.org>
Date: Feb 02 2022 17:43:50 +0000
Subject: Merge branch 'lrupp/forbit_access_to_svm_related_directories' into 'production'


- forbit the delivery of files below .svn and .git repositories

See merge request infra/salt!536
---

diff --git a/pillar/role/web_jekyll.sls b/pillar/role/web_jekyll.sls
index 4176328..b2bffed 100644
--- a/pillar/role/web_jekyll.sls
+++ b/pillar/role/web_jekyll.sls
@@ -36,6 +36,10 @@ nginx:
                     - application/x-javascript
                     - application/javascript
                 - expires: $expires
+                - location ~ /\.svn:
+                    - return 404
+                - location ~ /\.git:
+                    - return 404
                 - location /:
                     - index:
                         - index.html
diff --git a/pillar/role/web_static.sls b/pillar/role/web_static.sls
index 4ae6291..293dd72 100644
--- a/pillar/role/web_static.sls
+++ b/pillar/role/web_static.sls
@@ -36,6 +36,10 @@ nginx:
                     - application/x-javascript
                     - application/javascript
                 - expires: $expires
+                - location ~ /\.svn:
+                    - return 404
+                - location ~ /\.git:
+                    - return 404
                 - location /:
                     - index:
                         - index.html