mirror of
https://github.com/YunoHost-Apps/concrete5_ynh.git
synced 2024-09-03 18:25:54 +02:00
Revert "Upadte nginx try !"
This commit is contained in:
frju365
GitHub
parent
60c2a1773f
commit
0c83e046af
1 changed files with 56 additions and 47 deletions
139
conf/nginx.conf
139
conf/nginx.conf
|
|
@ -1,77 +1,66 @@
|
||||||
location ^~ YNH_WWW_PATH {
|
root ROOT_PATH;
|
||||||
alias YNH_WWW_FINALPATH/;
|
server_name https://APP_URL;
|
||||||
add_header "X-Frame-Options" "SAMEORIGIN";
|
add_header "X-Frame-Options" "SAMEORIGIN";
|
||||||
add_header "X-XSS-Protection" "1; mode=block";
|
add_header "X-XSS-Protection" "1; mode=block";
|
||||||
add_header "X-Content-Type-Options" "nosniff";
|
add_header "X-Content-Type-Options" "nosniff";
|
||||||
|
index index.php index.html index.htm;
|
||||||
|
|
||||||
# Don't log robots.txt or favicon.ico files
|
|
||||||
location = YNH_WWW_FINALPATH/favicon.ico { log_not_found off; access_log off; }
|
|
||||||
location = YNH_WWW_FINALPATH/robots.txt { allow all; access_log off; log_not_found off; }
|
|
||||||
|
|
||||||
try_files $uri $uri/ /YNH_WWW_ROOTAPP/index.php?$query_string;
|
# Don't log robots.txt or favicon.ico files
|
||||||
|
location = /favicon.ico { log_not_found off; access_log off; }
|
||||||
|
location = /robots.txt { allow all; access_log off; log_not_found off; }
|
||||||
|
|
||||||
index YNH_WWW_ROOTPATH/index.php YNH_WWW_ROOTPATH/index.html YNH_WWW_ROOTPATH/index.htm;
|
# deny access to .htaccess files, if Apache's document root
|
||||||
|
# concurs with nginx's one
|
||||||
location ~ \.ht {
|
location ~ /\.ht {
|
||||||
deny all;
|
deny all;
|
||||||
}
|
}
|
||||||
location ~ \.git {
|
location ~ /\.git {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /src {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /gen-src {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /files/fonts {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /files/private {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /cache {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /bin {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /samples {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /tests {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /vendor {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /conf {
|
||||||
|
deny all;
|
||||||
|
}
|
||||||
|
location /logs {
|
||||||
deny all;
|
deny all;
|
||||||
}
|
}
|
||||||
|
|
||||||
location YNH_WWW_ROOTPATH/src {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/gen-src {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/files/fonts {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/files/private {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/cache {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/bin {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/samples {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/tests {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/vendor {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/conf {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
location YNH_WWW_ROOTPATH/logs {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
# Deny every non-public files in themes
|
# Deny every non-public files in themes
|
||||||
location ~ YNH_WWW_ROOTPATH/themes/(.+)\.(php|yml|twig|xlf|rzn|rzt|rzg)$ {
|
location ~ /themes/(.+)\.(php|yml|twig|xlf|rzn|rzt|rzg)$ {
|
||||||
deny all;
|
deny all;
|
||||||
}
|
}
|
||||||
location ~ YNH_WWW_ROOTPATH/themes/([^/.]+)/(Resources|Command|Tests|Controllers|Entities|Form|Model|Services)/ {
|
location ~ /themes/([^/.]+)/(Resources|Command|Tests|Controllers|Entities|Form|Model|Services)/ {
|
||||||
deny all;
|
deny all;
|
||||||
}
|
}
|
||||||
location ~ YNH_WWW_ROOTPATH/install.php/ {
|
|
||||||
try_files $uri $uri/ /install.php?$query_string;
|
# Enable Expire on Themes public assets
|
||||||
}
|
|
||||||
location ~ YNH_WWW_ROOTPATH/dev.php/ {
|
|
||||||
try_files $uri $uri/ /dev.php?$query_string;
|
|
||||||
}
|
|
||||||
location ~ YNH_WWW_ROOTPATH/preview.php/ {
|
|
||||||
try_files $uri $uri/ /preview.php?$query_string;
|
|
||||||
}
|
|
||||||
location ~ YNH_WWW_ROOTPATH/clear_cache.php/ {
|
|
||||||
try_files $uri $uri/ /clear_cache.php?$query_string;
|
|
||||||
}
|
|
||||||
# Enable Expire on Themes public assets
|
|
||||||
location ~* ^/themes/*.*\.(?:ico|css|js|woff2?|eot|ttf|otf|svg|gif|jpe?g|png)$ {
|
location ~* ^/themes/*.*\.(?:ico|css|js|woff2?|eot|ttf|otf|svg|gif|jpe?g|png)$ {
|
||||||
expires 30d;
|
expires 30d;
|
||||||
access_log off;
|
access_log off;
|
||||||
|
|
@ -87,8 +76,8 @@ location ^~ YNH_WWW_PATH {
|
||||||
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
|
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
|
||||||
add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
|
add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
# Enable Expire on native documents files
|
# Enable Expire on native documents files
|
||||||
location ~* ^/files/*.*\.(?:ico|gif|jpe?g|png)$ {
|
location ~* ^/files/*.*\.(?:ico|gif|jpe?g|png)$ {
|
||||||
expires 15d;
|
expires 15d;
|
||||||
access_log off;
|
access_log off;
|
||||||
|
|
@ -105,7 +94,31 @@ location ^~ YNH_WWW_PATH {
|
||||||
add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
|
add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
location ~ ^/index\.php(/|$) {
|
|
||||||
|
location / {
|
||||||
|
# First attempt to serve request as file, then
|
||||||
|
# as directory, then fall back to front-end controller
|
||||||
|
# (do not forget to pass GET parameters).
|
||||||
|
try_files $uri $uri/ /index.php?$query_string;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~ /install.php/ {
|
||||||
|
try_files $uri $uri/ /install.php?$query_string;
|
||||||
|
}
|
||||||
|
location ~ /dev.php/ {
|
||||||
|
try_files $uri $uri/ /dev.php?$query_string;
|
||||||
|
}
|
||||||
|
location ~ /preview.php/ {
|
||||||
|
try_files $uri $uri/ /preview.php?$query_string;
|
||||||
|
}
|
||||||
|
location ~ /clear_cache.php/ {
|
||||||
|
try_files $uri $uri/ /clear_cache.php?$query_string;
|
||||||
|
}
|
||||||
|
|
||||||
|
#
|
||||||
|
# Production entry point.
|
||||||
|
#
|
||||||
|
location ~ ^/index\.php(/|$) {
|
||||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||||
# NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
|
# NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
|
||||||
|
|
@ -133,7 +146,3 @@ location ^~ YNH_WWW_PATH {
|
||||||
fastcgi_pass unix:/var/run/php5-fpm.sock;
|
fastcgi_pass unix:/var/run/php5-fpm.sock;
|
||||||
include fastcgi_params;
|
include fastcgi_params;
|
||||||
}
|
}
|
||||||
|
|
||||||
# Include SSOWAT user panel.
|
|
||||||
# include conf.d/yunohost_panel.conf.inc;
|
|
||||||
}
|
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue