The shared security snippet blocked any path matching /(admin|administrator| login.action|struts) with 'return 444', which drops the connection. That bare 'admin' token also matched our own operations dashboard at /admin and the new /admin/compliance-orders, so the browser showed 'This site can't be reached'. Dropped the bare 'admin' token; administrator/login.action/struts stay blocked. Applied live on prod (sudo edit + nginx reload); this updates the source of truth so the ansible nginx role won't reintroduce it. |
||
|---|---|---|
| .. | ||
| defaults | ||
| handlers | ||
| tasks | ||
| templates | ||