From 70b75894933a51434b8853a72d93b82c09373210 Mon Sep 17 00:00:00 2001
From: Alexander Dietrich <alexander@dietrich.cx>
Date: Sat, 17 Nov 2018 21:23:45 +0100
Subject: [PATCH] nginx: disable symlinks only if_not_owner

---
 roles/nginx/files/snippets/no-unsafe-files.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/nginx/files/snippets/no-unsafe-files.conf b/roles/nginx/files/snippets/no-unsafe-files.conf
index 6f00246..5a6df31 100644
--- a/roles/nginx/files/snippets/no-unsafe-files.conf
+++ b/roles/nginx/files/snippets/no-unsafe-files.conf
@@ -1,4 +1,4 @@
-disable_symlinks on from=$document_root;
+disable_symlinks if_not_owner from=$document_root;
 
 # Do not serve dotfiles.
 location ~ /\. {