diff --git a/conf/nginx.conf b/conf/nginx.conf index 33d823f..eb55616 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,33 +1,42 @@ -location YNH_WWW_PATH { +location {LOCATION} { + alias {DESTDIR}/www/; - # Path to source - alias YNH_WWW_ALIAS ; + # Default indexes and catch-all + index index.html index.php; + try_files $uri $uri/ {PATH}/index.php?$args; + + # Force HTTPS + if ($scheme = http) { + rewrite ^ https://$server_name$request_uri? permanent; + } - # Example PHP configuration (remove if not used) - index index.php; + # Prevent useless logs + location = {PATH}/favicon.ico { + log_not_found off; + access_log off; + } + location = {PATH}/robots.txt { + allow all; + log_not_found off; + access_log off; + } - # Common parameter to increase upload size limit in conjuction with dedicated php-fpm file - #client_max_body_size 50M; + # Deny access to hidden files and directories + location ~ ^{PATH}/(.+/|)\.(?!well-known\/) { + deny all; + } - try_files $uri $uri/ index.php; - location ~ [^/]\.php(/|$) { - fastcgi_split_path_info ^(.+?\.php)(/.*)$; - fastcgi_pass unix:/var/run/php5-fpm.sock; - - # Filename to be changed if dedicated php-fpm process is required - # This is to be used INSTEAD of line above - # Don't forget to adjust scripts install/upgrade/remove/backup accordingly - # - #fastcgi_pass unix:/var/run/php5-fpm-YNH_WWW_APP.sock; + # Execute and serve PHP files + location ~ [^/]\.php(/|$) { + fastcgi_split_path_info ^(.+?\.php)(/.*)$; + fastcgi_pass unix:/var/run/php5-fpm-{POOLNAME}.sock; + fastcgi_index index.php; + include fastcgi_params; + fastcgi_param REMOTE_USER $remote_user; + fastcgi_param PATH_INFO $fastcgi_path_info; + fastcgi_param SCRIPT_FILENAME $request_filename; + } - fastcgi_index index.php; - include fastcgi_params; - fastcgi_param REMOTE_USER $remote_user; - fastcgi_param PATH_INFO $fastcgi_path_info; - fastcgi_param SCRIPT_FILENAME $request_filename; - } - # PHP configuration end - - # Include SSOWAT user panel. - include conf.d/yunohost_panel.conf.inc; + # Include SSOWAT user panel. + include conf.d/yunohost_panel.conf.inc; }