From 187bb1583fb856b4b8dd7c1e539a3a5a300b8b00 Mon Sep 17 00:00:00 2001
From: Giancarlo Razzolini <grazzolini@archlinux.org>
Date: Wed, 11 Jan 2017 13:12:58 -0200
Subject: [PATCH] roles/archweb: Block downloads of the boostrap tar.gz files
 and airootfs.sfs files.

---
 roles/archweb/templates/nginx.d.conf.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/archweb/templates/nginx.d.conf.j2 b/roles/archweb/templates/nginx.d.conf.j2
index cdf9b19cf..10a363a54 100644
--- a/roles/archweb/templates/nginx.d.conf.j2
+++ b/roles/archweb/templates/nginx.d.conf.j2
@@ -100,7 +100,7 @@ server {
         alias {{ archweb_dir }}/archlinux.org/logos/;
     }
 
-    location ~ ^/iso/(.*\.(iso|img)$) {
+    location ~ ^/iso/(.*\.(iso|img|tar\.gz|sfs)$) {
 	deny all;
     }
 
-- 
GitLab