From 23f5766a09cb1a7168248e47b2072b670639c98d Mon Sep 17 00:00:00 2001
From: Stanislaw Adaszewski <s.adaszewski@gmail.com>
Date: Sun, 3 May 2020 00:22:30 +0200
Subject: [PATCH] Disable Swagger and non-GET API as well.

---
 example/gitea-custom/Fockerfile        |  1 +
 example/gitea-disable/files/nginx.conf | 12 +++++++++---
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/example/gitea-custom/Fockerfile b/example/gitea-custom/Fockerfile
index f4f52d4..0eddfaf 100644
--- a/example/gitea-custom/Fockerfile
+++ b/example/gitea-custom/Fockerfile
@@ -14,6 +14,7 @@ steps:
       export GITEA_CONF=/usr/local/etc/gitea/conf/app.ini && \
       export GITEA_TMPL_BASE=/usr/local/share/gitea/templates/base && \
       export SECRET_CONF=/tmp/secrets.ini && \
+      crudini --set --inplace $GITEA_CONF api ENABLE_SWAGGER false && \
       crudini --set --inplace $GITEA_CONF server DISABLE_SSH true && \
       crudini --set --inplace $GITEA_CONF service DEFAULT_ALLOW_CREATE_ORGANIZATION false && \
       crudini --set --inplace $GITEA_CONF service DEFAULT_KEEP_EMAIL_PRIVATE true && \
diff --git a/example/gitea-disable/files/nginx.conf b/example/gitea-disable/files/nginx.conf
index 35b0abe..48a2708 100644
--- a/example/gitea-disable/files/nginx.conf
+++ b/example/gitea-disable/files/nginx.conf
@@ -14,6 +14,9 @@ http {
     location / {
       error_page 403 /403.html;
 
+      if ($uri ~ ^/api) {
+        set $test "api";
+      }
       rewrite ^/admin1/ $uri break;
       if ($uri ~ ^/([^/]*)/([^/]*)/(wiki|releases|issues)) {
         return 403;
@@ -22,10 +25,13 @@ http {
       if ($uri ~ ^/([^/]*)/([^/]*)/settings) {
         set $test "settings";
       }
-      if ($request_method = "POST") {
-        set $test "${test}_post";
+      if ($request_method != "GET") {
+        set $test "${test}_not-get";
+      }
+      if ($test = "settings_not-get") {
+        return 403;
       }
-      if ($test = "settings_post") {
+      if ($test = "api_not-get") {
         return 403;
       }