%PDF- %PDF-
Direktori : /etc/nginx/sites-enabled/ |
Current File : //etc/nginx/sites-enabled/specpages |
server { listen 10.27.27.5:443 ssl http2; ssl_certificate /etc/letsencrypt/live/specpages.varak.net/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/specpages.varak.net/privkey.pem; # managed by Certbot server_name specpages_old.varak.net; root /www/varak.net/specpages.varak.net; ## <-- Your only path reference. location = /favicon.ico { log_not_found off; #access_log off; } location = /robots.txt { allow all; log_not_found off; #access_log off; } # Very rarely should these ever be accessed outside of your lan location ~* \.(txt|log)$ { allow 192.168.0.0/16; deny all; } location ~ \..*/.*\.php$ { return 403; } location ~ ^/sites/.*/private/ { return 403; } # Allow "Well-Known URIs" as per RFC 5785 location ~* ^/.well-known/ { allow all; } # Block access to "hidden" files and directories whose names begin with a # period. This includes directories used by version control systems such # as Subversion or Git to store control files. location ~ (^|/)\. { return 403; } location / { # try_files $uri @rewrite; # For Drupal <= 6 try_files $uri /index.php?$query_string; # For Drupal >= 7 } location @rewrite { rewrite ^/(.*)$ /index.php?q=$1; } # Don't allow direct access to PHP files in the vendor directory. location ~ /vendor/.*\.php$ { deny all; return 404; } # In Drupal 8, we must also match new paths where the '.php' appears in # the middle, such as update.php/selection. The rule we use is strict, # and only allows this pattern with the update.php front controller. # This allows legacy path aliases in the form of # blog/index.php/legacy-path to continue to route to Drupal nodes. If # you do not have any paths like that, then you might prefer to use a # laxer rule, such as: # location ~ \.php(/|$) { # The laxer rule will continue to work if Drupal uses this new URL # pattern with front controllers other than update.php in a future # release. location ~ '\.php$|^/update.php' { fastcgi_split_path_info ^(.+?\.php)(|/.*)$; # Security note: If you're running a version of PHP older than the # latest 5.3, you should have "cgi.fix_pathinfo = 0;" in php.ini. # See http://serverfault.com/q/627903/94922 for details. include fastcgi_params; # Block httpoxy attacks. See https://httpoxy.org/. fastcgi_param HTTP_PROXY ""; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; fastcgi_param QUERY_STRING $query_string; fastcgi_intercept_errors on; # PHP 5 socket location. #fastcgi_pass unix:/var/run/php5-fpm.sock; fastcgi_pass 127.0.0.1:9000; # PHP 7 socket location. #fastcgi_pass unix:/var/run/php/php7.0-fpm.sock; } # Fighting with Styles? This little gem is amazing. # location ~ ^/sites/.*/files/imagecache/ { # For Drupal <= 6 location ~ ^/sites/.*/files/styles/ { # For Drupal >= 7 try_files $uri @rewrite; } # Handle private files through Drupal. Private file's path can come # with a language prefix. location ~ ^(/[a-z\-]+)?/system/files/ { # For Drupal >= 7 try_files $uri /index.php?$query_string; } location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ { expires max; log_not_found off; } } server { listen 10.27.27.5:80; listen 127.0.0.1; server_name specpages.varak.net; # return 301 https://www.speculumpages.cloud$request_uri; return 301 https://specpages.varak.net$request_uri; } server { listen 10.27.27.5:443 ssl http2; server_name specpages.varak.net; include ssl_params; ssl_certificate /etc/letsencrypt/live/specpages.varak.net/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/specpages.varak.net/privkey.pem; # managed by Certbot # return 301 https://www.speculumpages.cloud$request_uri; root /www/varak.net/specpages.varak.net; location / { index index.html index.htm index.php; autoindex on; autoindex_exact_size off; expires 2h; # try_files $uri $uri/ /index.php?$args; } # location /css { # expires 30d; # } # location /lib { # expires 30d; # } # location /js { # expires 30d; # } # location /fancybox { # expires 30d; # } # location /images { # expires 30d; # } # # location ~ \.php$ { # include fastcgi_params; # fastcgi_pass 127.0.0.1:9000; # fastcgi_index index.php; # fastcgi_param SCRIPT_FILENAME /home/asheara/www/www$fastcgi_script_name; # } }