From 659ecc3f0a608daebeab8e2179f2d8f9c3775d14 Mon Sep 17 00:00:00 2001
From: gsd <mamu@ebal.net>
Date: Wed, 12 Mar 2025 16:05:36 +0300
Subject: [PATCH] next

---
 Dockerfile          | 3 ++-
 docker-compose.yaml | 4 ++--
 entrypoint.sh       | 4 ++++
 3 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index fc6a27f..f6eb567 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,3 +1,4 @@
 FROM nginx:1.27.4-alpine
 RUN apk add apache2-utils
-COPY entrypoint.sh /docker-entrypoint.d/entrypoint.sh
\ No newline at end of file
+COPY entrypoint.sh /docker-entrypoint.d/entrypoint.sh
+RUN chmod +x /docker-entrypoint.d/entrypoint.sh
\ No newline at end of file
diff --git a/docker-compose.yaml b/docker-compose.yaml
index 0ceffbe..765018b 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -18,12 +18,12 @@ services:
     environment:
       - COMBO=test:test;test1:test1
       - GATEWAY=p_gw:9091;p_gw:9091|user:pass;p_gw:9091|user:pass
-      - PORT=9091
+      - PORT=9100
     #volumes:
     #  - $PWD/srv.conf:/etc/nginx/conf.d/srv.conf:ro
     #  - $PWD/.htpasswd:/etc/nginx/.htpasswd:ro
     ports:
-      - 9091:9091
+      - 9100:9100
     deploy:
       resources:
         limits:
diff --git a/entrypoint.sh b/entrypoint.sh
index b66c84a..e5d070c 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -83,6 +83,10 @@ if [ $COUNTER -gt 0 ]; then
         proxy_pass_header X-Is-Mirror;
         proxy_set_header Authorization "Basic $(echo $GATEWAY | cut -d "|" -f 2 | base64)";
         proxy_pass_header Authorization;
+
+        limit_except POST {
+            deny all;
+        }
     }
 
 EOT