add security.txt #167

Leptopoda · 2020-09-22T17:14:16Z

Feature request

Feature description

Add a configuration option for the security.txt file. It could look like:

#security.txt
location /security.txt {
    return 301 http://$host/.well-known/security.txt;
}

location = /.well-known/security.txt {
    alias /<User configurable path>/security.txt
}

Source/ inspired by

How the feature is useful

The security.txt is comparable to the robots.txt and serves contact information etc. to security researchers.
More information can be found on their site.

Leptopoda · 2020-09-23T08:15:54Z

Another option would be generate the security.txt file as well. In this case we could return it directly as plain text.

#security.txt
location /security.txt {
    return 301 http://$host/.well-known/security.txt;
}

location = /.well-known/security.txt {
    default_type text/plain;
    return 200 '
    Contact: mailto:<example@example.me>
    Preferred-Languages: <some language>
    ';
}

The example generator from their website can be found here.

MattIPv4 · 2020-09-23T22:45:46Z

👍 I think we should go for the former here, providing an option on each site added for a security.txt path. If present, we then include the blocks in the opening comment for that site.

Whilst nginxconfig is 100% a generator tool, I think we should focus on keeping it aimed at generating nginx config parts, not other files.

MattIPv4 added good first issue hacktoberfest enhancement labels Sep 23, 2020

digitalocean / nginxconfig.io

add security.txt #167

add security.txt #167

Leptopoda commented Sep 22, 2020 •

edited

Leptopoda commented Sep 23, 2020 •

edited

MattIPv4 commented Sep 23, 2020

digitalocean / nginxconfig.io

Join GitHub today

add security.txt #167

add security.txt #167

Comments

Leptopoda commented Sep 22, 2020 • edited

Feature request

Feature description

How the feature is useful

Leptopoda commented Sep 23, 2020 • edited

MattIPv4 commented Sep 23, 2020

Leptopoda commented Sep 22, 2020 •

edited

Leptopoda commented Sep 23, 2020 •

edited