From 1226f056d0033d279a12c76d185475095da77e87 Mon Sep 17 00:00:00 2001 From: dragondaddy Date: Sun, 30 Jul 2023 00:03:34 +0200 Subject: [PATCH] Let's try the old nginx conf file --- conf/nginx.conf | 108 +++++++++++++++++++++++------------------------- 1 file changed, 51 insertions(+), 57 deletions(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index ac78d84..f5d2b44 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,69 +1,63 @@ -#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent; +#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent; location __PATH__/ { - # Path to source - alias __INSTALL_DIR__/; + alias __INSTALL_DIR__/; - if (!-e $request_filename) { - rewrite ^(.*)$ /index.php?q=$1; - } + if (!-e $request_filename) { + rewrite ^(.*)$ /index.php?req=$1; + } - # Default indexes and catch-all - index index.php; - charset utf-8; + client_max_body_size 50m; + client_body_buffer_size 128k; - # Common parameter to increase upload size limit in conjunction with dedicated php-fpm file - client_max_body_size 50M; - client_body_buffer_size 128k; + # Default indexes and catch-all + index index.php; + charset utf-8; - location ~* \.php$ { - try_files $uri =404; - fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock; + location ~* \.php$ { + try_files $uri =404; + fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock; + fastcgi_index index.php; + include fastcgi_params; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + fastcgi_read_timeout 300; + } - fastcgi_index index.php; - include fastcgi_params; - fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; - fastcgi_read_timeout 300; - } + # make sure webfinger and other well known services aren't blocked + # by denying dot files and rewrite request to the front controller + location ^~ /.well-known/ { + allow all; + if (!-e $request_filename) { + rewrite ^(.*)$ /index.php?req=$1; + } + } - # make sure webfinger and other well known services aren't blocked - # by denying dot files and rewrite request to the front controller - location ^~ /.well-known/ { - allow all; - if (!-e $request_filename) { - rewrite ^(.*)$ /index.php?q=$1; - } - } + # statically serve these file types when possible + # otherwise fall back to front controller + # allow browser to cache them + # added .htm for advanced source code editor library + # location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|map|ttf|woff|woff2|svg)$ { + # expires 30d; + # try_files $uri /index.php?q=$uri&$args; + # } - # statically serve these file types when possible - # otherwise fall back to front controller - # allow browser to cache them - # added .htm for advanced source code editor library - # location ~* \.(jpg|jpeg|gif|png|ico|css|js|htm|html|map|ttf|woff|woff2|svg)$ { - # expires 30d; - # try_files $uri /index.php?q=$uri&$args; - # } + # block these file types + location ~* \.(tpl|md|tgz|log|out)$ { + deny all; + } - # block these file types - location ~* \.(tpl|md|tgz|log|out)$ { - deny all; - } + # deny access to all dot files + location ~ /\. { + deny all; + } - # deny access to all dot files - location ~ /\. { - deny all; - } + #deny access to store + location ~ /store { + deny all; + } - #deny access to store - location ~ /store { - deny all; - } - - #deny access to util - location ~ /util { - deny all; - } - - # Include SSOWAT user panel. - include conf.d/yunohost_panel.conf.inc; -} + #deny access to util + location ~ /util { + deny all; + } + }