Major website overhaul

etc/nginx/default.template.conf

@@ -1,4 +1,4 @@
-# Nginx configuration for HTTP only
+# Nginx configuration for HTTP
 
 server_tokens off;
 add_header X-XSS-Protection "1; mode=block";
@@ -8,6 +8,10 @@ upstream dev_tomcat_1 {
     server tomcat;
 }
 
+upstream dev_ghost_1 {
+    server ghost:2368;
+}
+
 # HTTP
 server {
     listen 80 default_server;
@@ -22,22 +26,19 @@ server {
     error_log  /var/log/nginx/error.log;
     access_log /var/log/nginx/access.log;
     root /var/www/html/public;
-		index index.php index.html index.htm index.jsp;
+		index index.html index.htm index.jsp;
 
     ####### Proxies #######
-    # PHP proxy
-    location ~ \.php$ {
-        try_files $uri =404;
-        fastcgi_split_path_info ^(.+\.php)(/.+)$;
-        fastcgi_pass php:9000;
-        fastcgi_index index.php;
-        include fastcgi_params;
-        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-        fastcgi_param PATH_INFO $fastcgi_path_info;
+    # Ghost proxy
+    location ~ {
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_pass http://ghost:2368;
     }
 
     # Tomcat proxy
-    location ~ \.(do|jspa|obr|jsp) {
+    location ~ \.(do|jspa|obr|jsp|txt|zip) {
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Forwarded-Server $host;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -56,7 +57,7 @@ server {
     }
 
     # Deny access to version control system directories.
-    location ~ /\.svn|/\.git {
+    location ~ /\.git {
         deny all;
         internal;
     }
@@ -66,30 +67,4 @@ server {
         allow all;
         root  /data/letsencrypt/;
     }
-
-    ####### PHPBB Forum #######
-    # PHPBB forum
-		location /board {
-				index index.php index.html index.htm;
-        try_files $uri $uri/ @rewriteapp;
-    }
-
-    # PHPBB installer rewrite
-    location /install/ {
-        try_files $uri $uri/ @rewrite_installapp;
-		}
-
-    location @rewriteapp {
-    		rewrite ^(.*)$ /app.php/$1 last;
-    }
-
-    # Deny access to internal phpbb files.
-    location ~ /board(config\.php|common\.php|files|images/avatars/upload|includes|(?<!ext/)phpbb|store|vendor) {
-    		deny all;
-        internal;
-		}
-
-    location @rewrite_installapp {
-        rewrite ^(.*)$ /board/install/app.php/$1 last;
-    }
 }