From d1b292e1f8810069026fe7be5eaa064f12f5ba3c Mon Sep 17 00:00:00 2001
From: Greg <gregman@livingonlinenow.com>
Date: Thu, 29 May 2025 17:32:59 +0200
Subject: [PATCH] feat: add protected data.json endpoint with Basic Auth and
 content type headers

---
 nginx.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/nginx.conf b/nginx.conf
index e168e4f..3ab799b 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -43,6 +43,12 @@ http {
         gzip on;
         gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
 
+        # Deny direct access to any files that might be mapped under a /data/ URI path
+        location /data/ {
+            deny all;
+            return 404; # Or 403 Forbidden
+        }
+
         location / {
             include /etc/nginx/nginx-auth.conf; # Apply Basic Auth to the whole site
             try_files $uri $uri/ /index.html;