secure webdav

Author: Steveorevo

conf-web/nginx.conf

@@ -5,7 +5,8 @@
 server {
     listen      %ip%:80;
     server_name webdav-%user%.%domain% ;
-
+    auth_basic "Restricted Access";
+    auth_basic_user_file /home/%user%/conf/web/webdav-%user%.%domain%/.htpasswd;
     include /home/%user%/conf/web/webdav-%user%.%domain%/nginx.forcessl.conf*;
 
     location / {

conf-web/nginx.ssl.conf

@@ -5,6 +5,8 @@
 server {
     listen      %ip%:443 ssl http2;
     server_name webdav-%user%.%domain% ;
+    auth_basic "Restricted Access";
+    auth_basic_user_file /home/%user%/conf/web/webdav-%user%.%domain%/.htpasswd;
     ssl_certificate      /home/%user%/conf/web/webdav-%user%.%domain%/ssl/webdav-%user%.%domain%.pem;
     ssl_certificate_key  /home/%user%/conf/web/webdav-%user%.%domain%/ssl/webdav-%user%.%domain%.key;
     ssl_stapling on;

webdav.php

@@ -152,7 +152,6 @@ public function setup( $user ) {
 
             // Create the password file.
             $pw_hash = trim( shell_exec( "sudo grep '^$user:' /etc/shadow" ) );
-            $pw_hash = $hcpp->delLeftMost( $pw_hash, "$user:" );
             file_put_contents( "/home/$user/conf/web/webdav-$user.$domain/.htpasswd", $pw_hash );
 
             // Create the nginx.conf file.