YunoHost-Apps/concrete5_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/concrete5_ynh.git synced 2024-09-03 18:25:54 +02:00
Code Issues Activity Actions

Update nginx.conf

Browse source
This commit is contained in:
frju365 2017-03-02 23:03:24 +01:00 • committed by GitHub
parent 7343d7c74e
commit e34a2cdc0d
1 changed files with 111 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

112
conf/nginx.conf
View file

@ -1,4 +1,114 @@
root ROOT_PATH;
location ^~ YNH_WWW_PATH {
alias YNH_WWW_FINALPATH/;
add_header "X-Frame-Options" "SAMEORIGIN";
add_header "X-XSS-Protection" "1; mode=block";
add_header "X-Content-Type-Options" "nosniff";
# Don't log robots.txt or favicon.ico files
location = YNH_WWW_FINALPATH/favicon.ico { log_not_found off; access_log off; }
location = YNH_WWW_FINALPATH/robots.txt { allow all; access_log off; log_not_found off; }
try_files $uri $uri/ /YNH_WWW_ROOTAPP/index.php?$query_string;
index YNH_WWW_ROOTPATH/index.php YNH_WWW_ROOTPATH/index.html YNH_WWW_ROOTPATH/index.htm;
location ~ \.ht {
deny all;
}
location ~ \.git {
deny all;
}
location YNH_WWW_ROOTPATH/src {
deny all;
}
location YNH_WWW_ROOTPATH/gen-src {
deny all;
}
location YNH_WWW_ROOTPATH/files/fonts {
deny all;
}
location YNH_WWW_ROOTPATH/files/private {
deny all;
}
location YNH_WWW_ROOTPATH/cache {
deny all;
}
location YNH_WWW_ROOTPATH/bin {
deny all;
}
location YNH_WWW_ROOTPATH/samples {
deny all;
}
location YNH_WWW_ROOTPATH/tests {
deny all;
}
location YNH_WWW_ROOTPATH/vendor {
deny all;
}
location YNH_WWW_ROOTPATH/conf {
deny all;
}
location YNH_WWW_ROOTPATH/logs {
deny all;
}
location YNH_WWW_ROOTPATH/flarum {
deny all;
return 404;
}
location ~* \.php$ {
fastcgi_split_path_info ^(.+.php)(/.+)$;
fastcgi_pass unix:/var/run/php5-fpm-YNH_WWW_ROOTAPP.sock;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $request_filename;
fastcgi_param HTTP_PROXY ""; # Fix for https://httpoxy.org/ vulnerability
fastcgi_index index.php;
fastcgi_read_timeout 600;
}
location ~* \.html$ {
expires -1;
}
location ~* \.(css|js|gif|jpe?g|png)$ {
expires 1M;
add_header Pragma public;
add_header Cache-Control "public, must-revalidate, proxy-revalidate";
}
gzip on;
gzip_http_version 1.1;
gzip_vary on;
gzip_comp_level 6;
gzip_proxied any;
gzip_types application/atom+xml
application/javascript
application/json
application/vnd.ms-fontobject
application/x-font-ttf
application/x-web-app-manifest+json
application/xhtml+xml
application/xml
font/opentype
image/svg+xml
image/x-icon
text/css
text/plain
text/xml;
gzip_buffers 16 8k;
gzip_disable "MSIE [1-6]\.(?!.*SV1)";
# Include SSOWAT user panel.
# include conf.d/yunohost_panel.conf.inc;
}
root ROOT_PATH;
server_name https://APP_URL;
add_header "X-Frame-Options" "SAMEORIGIN";
add_header "X-XSS-Protection" "1; mode=block";