Beiträge von frojnd

cat /etc/nginx/sites-enabled/zzz-omv-nginx
server {
    listen 90;
    listen [::]:90;
    set $root_path "/srv/dev-disk-by-label-z2/www/nextcloud";
    root $root_path;
    index index.html index.php;
    set $socket "unix:/var/run/fpm-6311723b-3091-42a6-8576-a2ba08878f2f.sock";
    access_log /var/log/nginx/ce12c79e-4b25-4d03-b0a2-99742c4938ee-access.log;
    error_log  /var/log/nginx/ce12c79e-4b25-4d03-b0a2-99742c4938ee-error.log;
    large_client_header_buffers 4 8k;
    add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;


location = /robots.txt {
log_not_found off;
allow all;
access_log off;
}


# The following 2 rules are only needed for the user_webfinger app.
# Uncomment it if you're planning to use this app.
#rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
#rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json
# last;
location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}


location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}


# set max upload size
client_max_body_size 50G;
fastcgi_buffers 64 4K;


# Disable gzip to avoid the removal of the ETag header
gzip off;


# Uncomment if your server is build with the ngx_pagespeed module
# This module is currently not supported.
#pagespeed off;




error_page 403 /core/templates/403.php;
error_page 404 /core/templates/404.php;
location / {
rewrite ^ /index.php$uri;
}


location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
deny all;
}


location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
deny all;
}


location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\.php(?:$|/) {
fastcgi_split_path_info ^(.+\.php)(/.*)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS on;
#Avoid sending the security headers twice
fastcgi_param modHeadersAvailable true;
fastcgi_param front_controller_active true;
fastcgi_pass $socket;
fastcgi_intercept_errors on;
}


location ~ ^/(?:updater|ocs-provider)(?:$|/) {
try_files $uri/ =404;
index index.php;
}


# Adding the cache control header for js and css files
# Make sure it is BELOW the PHP block
location ~* \.(?:css|js|woff|svg|gif)$ {
try_files $uri /index.php$uri$is_args$args;
add_header Cache-Control "public, max-age=7200";
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
# Optional: Don't log access to assets
access_log off;
}


location ~* \.(?:png|html|ttf|ico|jpg|jpeg)$ {
try_files $uri /index.php$uri$is_args$args;
# Optional: Don't log access to other assets
access_log off;
}
}