From: Tom Hughes <tom@compton.nu>
Date: Thu, 13 Oct 2022 21:51:34 +0000 (+0100)
Subject: Limit TOTP controls to the query-features endpoint
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/123c68fc9a445f5c712226ec311d6a47c89d5270

Limit TOTP controls to the query-features endpoint
---

diff --git a/cookbooks/overpass/templates/default/apache.erb b/cookbooks/overpass/templates/default/apache.erb
index 0aefcf85a..8ccd28a9d 100644
--- a/cookbooks/overpass/templates/default/apache.erb
+++ b/cookbooks/overpass/templates/default/apache.erb
@@ -32,7 +32,7 @@
         RewriteEngine on
         RewriteMap totp prg:/srv/query.openstreetmap.org/apache/totp-filter
         RewriteCond ${totp:%{HTTP_COOKIE}} =0
-        RewriteRule ^.*$ - [F,L]
+        RewriteRule ^/query-features - [F,L]
 
 <% if node[:overpass][:restricted_api] -%>
         ScriptAlias /query-features <%= @script_directory %>/interpreter