servnest-mkosi/mkosi.extra/etc/nginx/sites/niver.test.conf

39 lines
911 B
Plaintext

server {
listen [::1]:42443 ssl http2;
listen 127.0.0.1:42443 ssl http2;
server_name niver.test;
root /srv/php/niver/public;
index index.php index.html index.htm;
try_files $uri $uri/ @extensionless-php;
include inc/tls.conf;
include inc/errors.conf;
more_set_headers "Referrer-Policy : same-origin";
more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self'; frame-ancestors 'none'; form-action 'self';";
location ~ ^/iquane/(db|less|lessphp|inc|niver.log) {
return 403;
}
location ~ \.inc.php$ {
return 403;
}
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/run/php-fpm/niver.sock;
#fastcgi_index index.php;
include inc/fastcgi.conf;
try_files $uri =404;
}
location @extensionless-php {
rewrite ^(.*)$ $1.php last;
}
ssl_certificate /etc/ssl/certs/niver.crt;
ssl_certificate_key /etc/ssl/private/niver.key;
}