mirror of
https://github.com/YunoHost-Apps/hubzilla_ynh.git
synced 2024-09-03 19:26:21 +02:00
some improvements in nginx
This commit is contained in:
parent
dcfea03aef
commit
8ac372dc8b
1 changed files with 47 additions and 54 deletions
101
conf/nginx.conf
101
conf/nginx.conf
|
@ -1,6 +1,6 @@
|
||||||
root __FINALPATH__/;
|
|
||||||
location __PATH__
|
location __PATH__
|
||||||
{
|
{
|
||||||
|
alias __FINALPATH__/;
|
||||||
# Force https
|
# Force https
|
||||||
if ($scheme = http)
|
if ($scheme = http)
|
||||||
|
|
||||||
|
@ -14,67 +14,60 @@
|
||||||
rewrite ^(.*)$ /index.php?q=$1;
|
rewrite ^(.*)$ /index.php?q=$1;
|
||||||
}
|
}
|
||||||
|
|
||||||
}
|
client_max_body_size 20m;
|
||||||
|
client_body_buffer_size 128k;
|
||||||
|
|
||||||
|
# Default indexes and catch-all
|
||||||
|
index index.php;
|
||||||
|
charset utf-8;
|
||||||
|
|
||||||
|
|
||||||
# Example PHP configuration
|
# Example PHP configuration
|
||||||
index index.php index.html;
|
location ~* \.php$
|
||||||
try_files $uri $uri/ index.php;
|
{
|
||||||
location ~ [^/]\.php(/|$)
|
try_files $uri =404;
|
||||||
{
|
fastcgi_pass unix:/var/run/php5-fpm.sock;
|
||||||
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
|
|
||||||
fastcgi_pass unix:/var/run/php5-fpm-__NAME__.sock;
|
|
||||||
fastcgi_index index.php;
|
fastcgi_index index.php;
|
||||||
include fastcgi_params;
|
include fastcgi_params;
|
||||||
fastcgi_param REMOTE_USER $remote_user;
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
}
|
||||||
fastcgi_param SCRIPT_FILENAME $request_filename;
|
|
||||||
|
|
||||||
# Set max upload size
|
|
||||||
client_max_body_size 256M;
|
|
||||||
fastcgi_buffers 64 4K;
|
|
||||||
|
|
||||||
}
|
# make sure webfinger and other well known services aren't blocked
|
||||||
|
# by denying dot files and rewrite request to the front controller
|
||||||
|
location ^~ /.well-known/
|
||||||
|
{
|
||||||
|
allow all;
|
||||||
|
if (!-e $request_filename)
|
||||||
|
{
|
||||||
|
rewrite ^(.*)$ /index.php?q=$1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
# make sure webfinger and other well known services aren't blocked
|
# statically serve these file types when possible
|
||||||
# by denying dot files and rewrite request to the front controller
|
# otherwise fall back to front controller
|
||||||
location ^~ /.well-known/
|
# allow browser to cache them
|
||||||
{
|
# added .htm for advanced source code editor library
|
||||||
allow all;
|
# location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|map|ttf|woff|woff2|svg)$ {
|
||||||
if (!-e $request_filename)
|
# expires 30d;
|
||||||
{
|
# try_files $uri /index.php?q=$uri&$args;
|
||||||
rewrite ^(.*)$ /index.php?q=$1;
|
# }
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# statically serve these file types when possible
|
|
||||||
# otherwise fall back to front controller
|
|
||||||
# allow browser to cache them
|
|
||||||
# added .htm for advanced source code editor library
|
|
||||||
# location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|map|ttf|woff|woff2|svg)$ {
|
|
||||||
# expires 30d;
|
|
||||||
# try_files $uri /index.php?q=$uri&$args;
|
|
||||||
# }
|
|
||||||
|
|
||||||
# block these file types
|
# block these file types
|
||||||
location ~* \.(tpl|md|tgz|log|out)$
|
location ~* \.(tpl|md|tgz|log|out)$
|
||||||
|
{
|
||||||
{
|
deny all;
|
||||||
deny all;
|
}
|
||||||
}
|
|
||||||
|
|
||||||
# deny access to all dot files
|
# deny access to all dot files
|
||||||
location ~ /\.
|
location ~ /\.
|
||||||
|
{
|
||||||
{
|
deny all;
|
||||||
deny all;
|
}
|
||||||
}
|
|
||||||
|
|
||||||
#deny access to store
|
#deny access to store
|
||||||
location ~ /store
|
location ~ /store
|
||||||
|
{
|
||||||
{
|
deny all;
|
||||||
deny all;
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue