diff --git a/etc/nginx/snippets/users/php_cosmicice.conf b/etc/nginx/snippets/users/php_cosmicice.conf new file mode 100644 index 0000000..c87f0ae --- /dev/null +++ b/etc/nginx/snippets/users/php_cosmicice.conf @@ -0,0 +1,12 @@ +location ~ \.php$ { + include fastcgi.conf; + + fastcgi_index index.php; + + if (!-f $request_filename) { + return 404; + } + + fastcgi_split_path_info ^(.+\.php)(/.+)$; + fastcgi_pass unix:/run/php/php-fpm-cosmicice.sock; +} diff --git a/etc/nginx/user-sites-available/cosmicice.cat.conf b/etc/nginx/user-sites-available/cosmicice.cat.conf new file mode 100644 index 0000000..13076e3 --- /dev/null +++ b/etc/nginx/user-sites-available/cosmicice.cat.conf @@ -0,0 +1,58 @@ +### cosmicice.cat - local ### +server { + include snippets/listen.conf; + server_name cosmicice.cat www.cosmicice.cat; + + error_log /home/cosmicice/logs/cosmicice.cat-error.log crit; + + location / { + return 307 https://$host$request_uri; + } + + location /.well-known/acme-challenge/ { + alias /var/lib/letsencrypt/.well-known/acme-challenge/; + } +} + +server { + include snippets/listen_ssl.conf; + server_name cosmicice.cat www.cosmicice.cat; + + include snippets/ssl.conf; + + ssl_certificate /etc/letsencrypt/live/cosmicice.cat/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/cosmicice.cat/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/cosmicice.cat/chain.pem; + ssl_dhparam /etc/ssl/certs/envs_dhparam.pem; + + + server_tokens off; + add_header Strict-Transport-Security "max-age=63072000; preload"; + add_header X-Frame-Options "SAMEORIGIN"; + add_header X-Content-Type-Options nosniff; + add_header X-XSS-Protection "1; mode=block"; + + add_header 'Access-Control-Allow-Origin' '*'; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; + + + error_log /home/cosmicice/logs/cosmicice.cat-error.log crit; + + root /home/cosmicice/public_html/; + index index.html index.php index.cgi index.py index.sh index.pl index.lua; + + location / { + add_header Access-Control-Allow-Origin *; + try_files $uri.html $uri $uri/ /index.php?$args ; + } + + location /cgi-bin { + gzip off; + include fastcgi_params; + fastcgi_pass unix:/var/run/fcgiwrap.socket; + } + + # include php and ssi + include snippets/users/php_cosmicice.conf; + ssi on; +} diff --git a/etc/nginx/user-sites-enabled/cosmicice.cat.conf b/etc/nginx/user-sites-enabled/cosmicice.cat.conf new file mode 120000 index 0000000..eec809f --- /dev/null +++ b/etc/nginx/user-sites-enabled/cosmicice.cat.conf @@ -0,0 +1 @@ +/etc/nginx/user-sites-available/cosmicice.cat.conf \ No newline at end of file