I followed this guide to set up my Laravel application with the exact same setup of the server. So basically, I have only changed the laravel application, the rest is the same.
When I access the ip_address in the browser my application redirects the users to ip_address/login page to log in, and I get a 403. The login.blade.php is located in laravel_root/resources/views/
In the nginx error.log I see “access forbidden by rule”.
I found somewhere as a solution to remove location ~ /.(?!well-known).* { deny all; }
from the nginx file. And it worked.
My question is what is the risk of this? Is there another more secure way to fix 403 without removing the deny all rule?
2
Answers
I have changed
to
and it worked. found the answer here
Laravel has built in authentication through middlewares etc.
As long as you point NGINX to the
/public
directory within Laravel this is a good starting point.