servnest-mkosi/install/nginx/sites/default-server.conf

30 lines
822 B
Plaintext

# This server block is reached only if no other server block can match, and displays some explanations
server {
listen [::1]:42443 ssl http2 default_server;
listen 127.0.0.1:42443 ssl http2 default_server;
ssl_certificate /etc/ssl/certs/servnest.crt;
ssl_certificate_key /etc/ssl/private/servnest.key;
ssl_stapling off;
root /srv/servnest/errors;
try_files index.php index.html $uri $uri/;
index index.php index.html;
location / {
root /srv/servnest/errors;
try_files /index.php =500;
index index.php;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/run/php-fpm/servnest.sock;
include /etc/nginx/inc/fastcgi.conf;
}
include /etc/nginx/inc/tls.conf;
include /etc/nginx/inc/errors.conf;
more_set_headers "Content-Security-Policy : default-src 'none'; frame-ancestors 'none';";
}