H-O-O-T-S/Open-RSC-Docker-Home
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Major website overhaul

Browse Source
This commit is contained in:
Marwolf
2018-08-03 23:24:48 -04:00
parent 94ee33c14e
commit 8b1bf24555
79 changed files with 5444 additions and 292 deletions
Download Patch File Download Diff File Expand all files Collapse all files

99
etc/nginx/HTTPS_default.template.conf
View File

@@ -1,4 +1,4 @@
# Nginx configuration for HTTPS only
# Nginx configuration for HTTPS
server_tokens off;
add_header X-XSS-Protection "1; mode=block";
@@ -8,6 +8,10 @@ upstream dev_tomcat_1 {
server tomcat;
}
upstream dev_ghost_1 {
server ghost:2368;
}
# HTTP
server {
listen 80 default_server;
@@ -22,7 +26,7 @@ server {
error_log /var/log/nginx/error.log;
access_log /var/log/nginx/access.log;
root /var/www/html/public;
index index.php index.html index.htm index.jsp;
index index.html index.htm index.jsp;
# Redirect all requests to HTTPS on :443
location / {
@@ -30,19 +34,16 @@ server {
}
####### Proxies #######
# PHP proxy
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass php:9000;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
# Ghost proxy
location ~ {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://ghost:2368;
}
# Tomcat proxy
location ~ \.(do|jspa|obr|jsp) {
location ~ \.(do|jspa|obr|jsp|txt|zip) {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -61,7 +62,7 @@ server {
}
# Deny access to version control system directories.
location ~ /\.svn|/\.git {
location ~ /\.git {
deny all;
internal;
}
@@ -71,32 +72,6 @@ server {
allow all;
root /data/letsencrypt/;
}
####### PHPBB Forum #######
# PHPBB forum
location /board {
index index.php index.html index.htm;
try_files $uri $uri/ @rewriteapp;
}
# PHPBB installer rewrite
location /install/ {
try_files $uri $uri/ @rewrite_installapp;
}
location @rewriteapp {
rewrite ^(.*)$ /app.php/$1 last;
}
# Deny access to internal phpbb files.
location ~ /board(config\.php|common\.php|files|images/avatars/upload|includes|(?<!ext/)phpbb|store|vendor) {
deny all;
internal;
}
location @rewrite_installapp {
rewrite ^(.*)$ /board/install/app.php/$1 last;
}
}
# HTTPS
@@ -122,19 +97,16 @@ server {
root /var/www/html/public;
####### Proxies #######
# PHP proxy
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass php:9000;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
# Ghost proxy
location ~ {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://ghost:2368;
}
# Tomcat proxy
location ~ \.(do|jspa|obr|jsp) {
location ~ \.(do|jspa|obr|jsp|txt|zip) {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -158,7 +130,7 @@ server {
}
# Deny access to version control system directories.
location ~ /\.svn|/\.git {
location ~ /\.git {
deny all;
internal;
}
@@ -168,31 +140,4 @@ server {
allow all;
root /data/letsencrypt/;
}
####### PHPBB Forum #######
# PHPBB forum
location /board {
index index.php index.html index.htm;
try_files $uri $uri/ @rewriteapp;
}
# PHPBB installer rewrite
location /install/ {
try_files $uri $uri/ @rewrite_installapp;
}
location @rewriteapp {
rewrite ^(.*)$ /app.php/$1 last;
}
# Deny access to internal phpbb files.
location ~ /board(config\.php|common\.php|files|images/avatars/upload|includes|(?<!ext/)phpbb|store|vendor) {
deny all;
internal;
}
location @rewrite_installapp {
rewrite ^(.*)$ /board/install/app.php/$1 last;
}
}