1e9daa8858
- docker-compose.server.yml: app on APP_BIND for an existing nginx proxy, QLO_SSL passed to the container - docker/setup-testserver.ps1: one-shot setup for Docker Desktop/WSL (random .env secrets, CLI install that never reinstalls over an existing shop, German texts, optional demo content, hardening) - docker/harden-test-server.php: delete demo customer pub@qloapps.com, disable webservice API keys, set SSL mode, deny module log folders - docker/nginx-qloapps.conf: HTTPS + basic auth + X-Forwarded-Proto - apache: deny /modules/*/logs/ (qlocmconnector logs API secrets) - docker/TESTSERVER.md: Windows Server guide (German) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
10 lines
481 B
Plaintext
10 lines
481 B
Plaintext
# The repo is bind-mounted as web root: never serve dotfiles (.env, .git, ...) or docker files.
|
|
RedirectMatch 404 "/\.(?!well-known/)"
|
|
RedirectMatch 404 "^/(docker/|docker-compose\.yml)"
|
|
# Module log folders (qlocmconnector logs full API requests incl. client_secret)
|
|
RedirectMatch 404 "^/modules/[^/]+/logs/"
|
|
# Installation is done via CLI (see docker-compose.yml); a web re-install would wipe the database.
|
|
RedirectMatch 404 "^/install-dev"
|
|
ServerTokens Prod
|
|
ServerSignature Off
|