-
Notifications
You must be signed in to change notification settings - Fork 14
/
nginx_ssl.conf
58 lines (44 loc) · 1.65 KB
/
nginx_ssl.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name strichliste.yourdomain.tld;
root /var/www/strichliste.yourdomain.tld/public;
location / {
# try to serve file directly, fallback to index.php
try_files $uri /index.php$is_args$args;
}
location ~ ^/index\.php(/|$) {
fastcgi_split_path_info ^(.+\.php)(/.*)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
#Avoid sending the security headers twice
fastcgi_param modHeadersAvailable true;
fastcgi_param front_controller_active true;
fastcgi_pass php-handler;
fastcgi_intercept_errors on;
fastcgi_request_buffering off;
# Prevents URIs that include the front controller. This will 404:
# http://domain.tld/index.php/some-path
# Remove the internal directive to allow URIs like this
internal;
}
# return 404 for all other php files not matching the front controller
# this prevents access to other php files you don't want to be accessible.
location ~ \.php$ {
return 404;
}
ssl_certificate /etc/letsencrypt/live/strichliste.yourdomain.tld/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/strichliste.yourdomain.tld/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}
server {
listen [::]:80;
listen 80;
server_name strichliste.yourdomain.tld;
if ($host = strichliste.yourdomain.tld) {
return 301 https://$host$request_uri;
}
return 404;
}