48 lines
1.2 KiB
Plaintext
48 lines
1.2 KiB
Plaintext
#server {
|
|
# listen 80;
|
|
# listen [::]:80;
|
|
# server_name niver.4.niv.re;
|
|
# return 301 https://niver.4.niv.re$request_uri;
|
|
#}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
listen [::]:443 ssl http2;
|
|
server_name niver.4.niv.re;
|
|
|
|
root /var/www/niver;
|
|
index index.php index.html index.htm;
|
|
try_files $uri $uri/ @extensionless-php;
|
|
|
|
include inc/tls.conf;
|
|
include inc/errors.conf;
|
|
|
|
error_log /var/log/nginx/niver.4.niv.re-error.log info;
|
|
access_log /var/log/nginx/niver.4.niv.re-access.log tls;
|
|
|
|
more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self'; frame-ancestors 'none';";
|
|
|
|
location ~ ^/motrig/(db|less|lessphp|inc|niver.log) {
|
|
return 403;
|
|
}
|
|
|
|
location ~ \.inc.php$ {
|
|
return 403;
|
|
}
|
|
|
|
location ~ \.php$ {
|
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
|
fastcgi_pass unix:/var/run/php/niver.sock;
|
|
#fastcgi_index index.php;
|
|
include inc/fastcgi.conf;
|
|
try_files $uri =404;
|
|
}
|
|
|
|
location @extensionless-php {
|
|
rewrite ^(.*)$ $1.php last;
|
|
}
|
|
|
|
ssl_certificate /etc/letsencrypt/live/niver.4.niv.re/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/niver.4.niv.re/privkey.pem;
|
|
}
|