YunoHost-Apps/matomo_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/matomo_ynh.git synced 2024-09-03 19:45:56 +02:00
Code Issues Activity Actions

Update nginx.conf

Browse source
This commit is contained in:
ericgaspar 2021-05-17 18:27:27 +02:00
parent 03a5f200f6
commit 3d9e098bd5
No known key found for this signature in database
GPG key ID: 574F281483054D44
1 changed files with 14 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
conf/nginx.conf
View file

@ -15,24 +15,22 @@ location __PATH__/ {
client_max_body_size 100M; client_max_body_size 100M;
try_files $uri $uri/ index.php; try_files $uri $uri/ index.php;
location ~ [^/]\.php(/|$) { location __PATH__/(index|matomo|piwik|js/index|plugins/HeatmapSessionRecording/configs)\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$; include snippets/fastcgi-php.conf;
try_files $fastcgi_script_name =404;
fastcgi_param HTTP_PROXY "";
fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock; fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param REMOTE_USER $remote_user;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param SCRIPT_FILENAME $request_filename;
} }
## deny access to all other .php files ## deny access to all other .php files
location ~* ^.+\.php$ { location ~* ^.+\.php$ {
deny all; deny all;
return 403; return 403;
} }
location __PATH__/ {
try_files $uri $uri/ =404;
}
## disable all access to the following directories ## disable all access to the following directories
location __PATH__/(config|tmp|core|lang) { location __PATH__/(config|tmp|core|lang) {
@ -40,6 +38,11 @@ location __PATH__/ {
return 403; # replace with 404 to not show these directories exist return 403; # replace with 404 to not show these directories exist
} }
location __PATH__/\.ht {
deny all;
return 403;
}
location ~ js/container_.*_preview\.js$ { location ~ js/container_.*_preview\.js$ {
expires off; expires off;
more_set_headers "Cache-Control: private, no-cache, no-store"; more_set_headers "Cache-Control: private, no-cache, no-store";
@ -60,7 +63,7 @@ location __PATH__/ {
} }
## properly display textfiles in root directory ## properly display textfiles in root directory
location ~/(.*\.md|LEGALNOTICE|LICENSE) { location __PATH__/(.*\.md|LEGALNOTICE|LICENSE) {
default_type text/plain; default_type text/plain;
} }