A localização do Nginx permite que o ip não funcione como esperado

Question

eu preciso da sua ajuda para definir a permissão de localização,

location /route {
    deny [my-ip];
}

Então, isso funciona, não me deixa acessar a rota

Lança este erro

403 Forbidden
nginx/1.10.0 (Ubuntu)

E isso ...

location /route {
    allow [my-ip];
    deny all;
}

Não me deixa acessar, mas deve permitir que eu acesse a rota, não entendo o motivo, mostra esse erro

404 Not Found
nginx/1.10.0 (Ubuntu)

Arquivo de configuração (com dois exemplos nas rotas):

server {
listen 80 default_server;
listen [::]:80 default_server;

# SSL configuration
#
# listen 443 ssl default_server;
# listen [::]:443 ssl default_server;
#
# Note: You should disable gzip for SSL traffic.
# See: https://bugs.debian.org/773332
#
# Read up on ssl_ciphers to ensure a secure configuration.
# See: https://bugs.debian.org/765782
#
# Self signed certs generated by the ssl-cert package
# Don't use them in a production server!
#
# include snippets/snakeoil.conf;

root /var/www/laravel/public;
# Add index.php to the list if you are using PHP
index index.php index.html index.htm;

server_name [my-domain];

location / {
    # First attempt to serve request as file, then
    # as directory, then fall back to displaying a 404.
    try_files $uri $uri/ /index.php?$query_string;
}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ \.php$ {
    include snippets/fastcgi-php.conf;
#
#   # With php7.0-cgi alone:
#   fastcgi_pass 127.0.0.1:9000;
#   # With php7.0-fpm:
    fastcgi_pass unix:/run/php/php7.0-fpm.sock;
}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
location ~ /\.ht {
    deny all;
}

# Phpmyadmin Configurations
location /phpmyadmin {
   root /usr/share/;
   index index.php index.html index.htm;
   location ~ ^/phpmyadmin/(.+\.php)$ {
           try_files $uri =404;
           root /usr/share/;
           #fastcgi_pass 127.0.0.1:9000;
           #fastcgi_param HTTPS on; # <-- add this line
           fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
           fastcgi_index index.php;
           fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
           include fastcgi_params;
   }
   location ~* ^/phpmyadmin/(.+\.
(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
           root /usr/share/;
   }
}

# Dealing with the uppercased letters
location /phpMyAdmin {
   rewrite ^/* /phpmyadmin last;
}

location /logs {
    deny [myip];
}

location /admin {
    allow [myip];
    deny all;
}
}

    

Answer 1

Não estou convencido de que isso seja particularmente seguro, pois o script /index.php permanece desprotegido. Mas você está sobrescrevendo a instrução try_files no bloco location / , então você deve adicioná-la ao novo bloco location :

location /admin {
    allow [my-ip];
    deny all;

    try_files $uri $uri/ /index.php?$query_string;
}