Update Nginx configuration to protect static files in media dedicated directory

diff --git a/etc/nginx.conf b/etc/nginx.conf
index 4cadc469564dd99e8f1456a6c166a356ba841e69..4c1df0cb9c5e4e00720f6a319bd4c1cf1e918154 100644 (file)
--- a/etc/nginx.conf
+++ b/etc/nginx.conf
@@ -12,12 +12,14 @@ server {
        client_max_body_size 4096M; # adjust to taste
 
        # Django media
-       location /media/ {
-                       alias /srv/media/; # your Django project's media files - amend as required
+       location /media {
+                internal;  # protect media files  directory only accessible through Django
+                       alias /srv/media; # your Django project's media files - amend as required
+
        }
        # Django static
        location /static {
-               alias /srv/static/; # your Django project's static files - amend as required
+               alias /srv/static; # your Django project's static files - amend as required
        }
 
        # phpmyadmin