nginx.conf 1.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. #--MULTISITE--if (!-e $request_filename) {
  2. #--MULTISITE--rewrite /ecrire$ $scheme://$host$uri/ permanent;
  3. #--MULTISITE--rewrite ^__PATHTOCHANGE__(/[^/]+)?(/.*\.php)$ __PATHTOCHANGE__$2 last;
  4. #--MULTISITE--}
  5. location __PATHTOCHANGE__ {
  6. alias __FINALPATH__/;
  7. index index.php;
  8. if (!-e $request_filename)
  9. {
  10. rewrite ^(.+)$ __PATHTOCHANGE__/index.php?q=$1 last;
  11. }
  12. if ($scheme = http) {
  13. rewrite ^ https://$server_name$request_uri? permanent;
  14. }
  15. client_max_body_size 30m;
  16. # Add headers to serve security related headers
  17. add_header Strict-Transport-Security "max-age=15768000;";
  18. add_header X-Content-Type-Options nosniff;
  19. add_header X-Frame-Options "SAMEORIGIN";
  20. add_header X-XSS-Protection "1; mode=block";
  21. add_header X-Robots-Tag none;
  22. add_header X-Download-Options noopen;
  23. add_header X-Permitted-Cross-Domain-Policies none;
  24. location ~^/(\.ht)/{
  25. deny all;
  26. }
  27. location ~* \.(jpg|jpeg|gif|css|png|js|ico|swf|mp3|pdf)$ {
  28. # Le contenu statique, est signalé au navigateur comme étant
  29. # à garder en cache une semaine. Si il y a un proxy sur la
  30. # route, celui-ci est autorisé à faire une copie et à la
  31. # cacher.
  32. expires 1w;
  33. add_header Cache-Control public;
  34. }
  35. location ~ [^/]\.php(/|$) {
  36. fastcgi_split_path_info ^(.+?\.php)(/.*)$;
  37. fastcgi_pass unix:/var/run/php5-fpm-__NAMETOCHANGE__.sock;
  38. fastcgi_index index.php;
  39. include fastcgi_params;
  40. fastcgi_param REMOTE_USER $remote_user;
  41. fastcgi_param PATH_INFO $fastcgi_path_info;
  42. fastcgi_param SCRIPT_FILENAME $request_filename;
  43. }
  44. #--PRIVATE--# Include SSOWAT user panel.
  45. #--PRIVATE--include conf.d/yunohost_panel.conf.inc;
  46. }