matomo-nginx
matomo-nginx copied to clipboard
Denying /plugins results in missing images/icons in the GUI
The current suggestion is to render a 403 forbidden response to requests for /plugins/...
, with the following rule (see https://github.com/matomo-org/matomo-nginx/blob/5b232af8ec1fd9d033f1c4ab9343f4073df64644/sites-available/matomo.conf#L80C1-L83C6):
location ~ ^/(libs|vendor|plugins|misc|node_modules) {
deny all;
return 403;
}
This results in e.g. the Matomo Logo on top left corner of the Matomo GUI to be unavailable: https://your.webserver.tld/plugins/Morpheus/images/logo.svg?matomo
Suggested solution: add a more specific location matcher so that requests to images are still possible, but not neccessarily everything unter /plugins/
is reachable.