01/04: nginx: hydra.gnu.org: Disallow unencrypted log-in.

[Ludovic Courtès]

civodul pushed a commit to branch master
in repository maintenance.

commit e71ab8125c5db5ac04c8ff7945590e1b12dda218
Author: Ludovic Courtès <address@hidden>
Date:   Wed Apr 27 15:47:04 2016 +0200

    nginx: hydra.gnu.org: Disallow unencrypted log-in.
---
 hydra/nginx/hydra.gnu.org.conf |    9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/hydra/nginx/hydra.gnu.org.conf b/hydra/nginx/hydra.gnu.org.conf
index f103ce8..baf2943 100644
--- a/hydra/nginx/hydra.gnu.org.conf
+++ b/hydra/nginx/hydra.gnu.org.conf
@@ -91,6 +91,15 @@ http {
           break;
        }
 
+        location = /login {
+           # Disallow unencrypted logins.  Hydra's client-side JS code
+           # is dumb and simply says "Unknown server error" instead of
+           # following the redirection, though.
+           error_page 403 = https://hydra.gnu.org/login;
+           return 403;
+           break;
+        }
+
        include hydra.gnu.org-locations.conf;
     }