mirror of
https://github.com/pi-hole/pi-hole.git
synced 2024-11-15 10:43:55 +00:00
3ef90a9e47
The Access-Control-Allow-Origin header has only relevance, when a resource is loaded from an external host, so one that does not match the host of the primary loaded website. As the fonts are reasonably loaded via local URLs without hostname or scheme from the blocking page style sheet, they are never seen as external resources, regardless whether the blocking page is shown to the browser from a blocked domain or from the Pi-hole domain/IP. For reference: https://github.com/pi-hole/pi-hole/issues/3462 Signed-off-by: MichaIng <micha@dietpi.com>
97 lines
3.4 KiB
Text
97 lines
3.4 KiB
Text
# Pi-hole: A black hole for Internet advertisements
|
|
# (c) 2017 Pi-hole, LLC (https://pi-hole.net)
|
|
# Network-wide ad blocking via your own hardware.
|
|
#
|
|
# Lighttpd config for Pi-hole
|
|
#
|
|
# This file is copyright under the latest version of the EUPL.
|
|
# Please see LICENSE file for your rights under this license.
|
|
|
|
###############################################################################
|
|
# FILE AUTOMATICALLY OVERWRITTEN BY PI-HOLE INSTALL/UPDATE PROCEDURE. #
|
|
# ANY CHANGES MADE TO THIS FILE AFTER INSTALL WILL BE LOST ON THE NEXT UPDATE #
|
|
# #
|
|
# CHANGES SHOULD BE MADE IN A SEPARATE CONFIG FILE: #
|
|
# /etc/lighttpd/external.conf #
|
|
###############################################################################
|
|
|
|
server.modules = (
|
|
"mod_access",
|
|
"mod_auth",
|
|
"mod_expire",
|
|
"mod_fastcgi",
|
|
"mod_accesslog",
|
|
"mod_redirect",
|
|
"mod_setenv",
|
|
"mod_rewrite"
|
|
)
|
|
|
|
server.document-root = "/var/www/html"
|
|
server.error-handler-404 = "/pihole/index.php"
|
|
server.upload-dirs = ( "/var/cache/lighttpd/uploads" )
|
|
server.errorlog = "/var/log/lighttpd/error.log"
|
|
server.pid-file = "/run/lighttpd.pid"
|
|
server.username = "lighttpd"
|
|
server.groupname = "lighttpd"
|
|
server.port = 80
|
|
accesslog.filename = "/var/log/lighttpd/access.log"
|
|
accesslog.format = "%{%s}t|%V|%r|%s|%b"
|
|
|
|
index-file.names = ( "index.php", "index.html", "index.lighttpd.html" )
|
|
url.access-deny = ( "~", ".inc", ".md", ".yml", ".ini" )
|
|
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
|
|
|
|
mimetype.assign = (
|
|
".ico" => "image/x-icon",
|
|
".jpeg" => "image/jpeg",
|
|
".jpg" => "image/jpeg",
|
|
".png" => "image/png",
|
|
".svg" => "image/svg+xml",
|
|
".css" => "text/css; charset=utf-8",
|
|
".html" => "text/html; charset=utf-8",
|
|
".js" => "text/javascript; charset=utf-8",
|
|
".json" => "application/json; charset=utf-8",
|
|
".map" => "application/json; charset=utf-8",
|
|
".txt" => "text/plain; charset=utf-8",
|
|
".eot" => "application/vnd.ms-fontobject",
|
|
".otf" => "font/otf",
|
|
".ttc" => "font/collection",
|
|
".ttf" => "font/ttf",
|
|
".woff" => "font/woff",
|
|
".woff2" => "font/woff2"
|
|
)
|
|
|
|
# Add user chosen options held in external file
|
|
# This uses include_shell instead of an include wildcard for compatibility
|
|
include_shell "cat external.conf 2>/dev/null"
|
|
|
|
# default listening port for IPv6 falls back to the IPv4 port
|
|
#include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port
|
|
#include_shell "/usr/share/lighttpd/create-mime.assign.pl"
|
|
#include_shell "/usr/share/lighttpd/include-conf-enabled.pl"
|
|
|
|
fastcgi.server = (
|
|
".php" => (
|
|
"localhost" => (
|
|
"socket" => "/tmp/php-fastcgi.socket",
|
|
"bin-path" => "/usr/bin/php-cgi"
|
|
)
|
|
)
|
|
)
|
|
|
|
# If the URL starts with /admin, it is the Web interface
|
|
$HTTP["url"] =~ "^/admin/" {
|
|
# Create a response header for debugging using curl -I
|
|
setenv.add-response-header = (
|
|
"X-Pi-hole" => "The Pi-hole Web interface is working!",
|
|
"X-Frame-Options" => "DENY"
|
|
)
|
|
}
|
|
|
|
# Block . files from being served, such as .git, .github, .gitignore
|
|
$HTTP["url"] =~ "^/admin/\.(.*)" {
|
|
url.access-deny = ("")
|
|
}
|
|
|
|
# Default expire header
|
|
expire.url = ( "" => "access plus 0 seconds" )
|