Skip to content

Security hardening: disable expose_php, raise max_input_time, remove Indexes #1269

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
lucifer4330k wants to merge 2 commits into
base: develop
Choose a base branch
from
Open

Security hardening: disable expose_php, raise max_input_time, remove Indexes #1269

lucifer4330k wants to merge 2 commits into from

Conversation

@lucifer4330k
Copy link

@lucifer4330k lucifer4330k commented Nov 17, 2025 •
edited
Loading

Implements server hardening from #1268:

  • docker/config/php.ini: set expose_php = Off
  • docker/config/php.ini: set max_input_time = 3600 to support large multipart parsing
  • docker/config/api.conf: remove Indexes from <Directory /var/www/openml> Options

Rationale:

  • Reduce information disclosure (hide PHP version)
  • Prevent directory listing
  • Avoid timeouts while reading multi-GB uploads given increased upload limits

This is a low-risk change that improves defaults for production deployments.

Fixes #1268

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Security hardening: disable expose_php, raise max_input_time, remove Indexes

1 participant

@lucifer4330k