@@ -0,0 +1,49 @@
+<VirtualHost %ip%:%web_ssl_port%>
+ ServerName %webmail_vhost%
+ Alias / /var/lib/roundcube/
+ Alias /error/ %home%/%user%/web/%domain%/document_errors/
+ #SuexecUserGroup %user% %group%
+
+ SSLEngine on
+ SSLVerifyClient none
+ SSLCertificateFile %home%/%user%/conf/mail/%domain%/ssl/%domain%.crt
+ SSLCertificateKeyFile %home%/%user%/conf/mail/%domain%/ssl/%domain%.key
+ IncludeOptional %home%/%user%/conf/web/%domain%/apache2.forcessl.conf*
+ <Directory "/usr/share/tinymce/www/">
+ Options Indexes MultiViews FollowSymLinks
+ AllowOverride None
+ Order allow,deny
+ allow from all
+ </Directory>
+ <Directory /var/lib/roundcube/>
+ Options +FollowSymLinks
+ # This is needed to parse /var/lib/roundcube/.htaccess. See its
+ # content before setting AllowOverride to None.
+ AllowOverride All
+ order allow,deny
+ # Protecting basic directories:
+ <Directory /var/lib/roundcube/config>
+ Options -FollowSymLinks
+ <Directory /var/lib/roundcube/temp>
+ Deny from all
+ <Directory /var/lib/roundcube/logs>
+</VirtualHost>
@@ -0,0 +1,44 @@
+<VirtualHost %ip%:%web_port%>
@@ -0,0 +1,35 @@
+server {
+ listen %ip%:%proxy_ssl_port% ssl http2;
+ server_name %domain_idn% %alias_idn%;
+ ssl_certificate %ssl_pem%;
+ ssl_certificate_key %ssl_key%;
+ error_log /var/log/%web_system%/domains/%domain%.error.log error;
+ location / {
+ proxy_pass https://%ip%:%web_ssl_port%;
+ location ~* ^.+\.(%proxy_extentions%)$ {
+ root %sdocroot%;
+ access_log /var/log/%web_system%/domains/%domain%.log combined;
+ access_log /var/log/%web_system%/domains/%domain%.bytes bytes;
+ expires max;
+ try_files $uri @fallback;
+ }
+ location /error/ {
+ alias %home%/%user%/web/%domain%/document_errors/;
+ location @fallback {
+ location ~ /\.ht {return 404;}
+ location ~ /\.svn/ {return 404;}
+ location ~ /\.git/ {return 404;}
+ location ~ /\.hg/ {return 404;}
+ location ~ /\.bzr/ {return 404;}
+ include %home%/%user%/conf/web/%domain%/nginx.ssl.conf_*;
+}
@@ -0,0 +1,40 @@
+ listen %ip%:%proxy_port%;
+ server_name %webmail_vhost%;
+ include %home%/%user%/conf/web/%domain/nginx.forcessl.conf*;
+ proxy_pass http://%ip%:%web_port%;
+ location ~* ^.+\.(jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,html,htm)$ {
+ alias /var/lib/roundcube/;
+ expires 15m;
+ location ~ /(config|temp|logs) {
+ return 404;
+ location ~ ^/(.*\.php)$ {
+ alias /var/lib/roundcube/$1;
+ fastcgi_pass 127.0.0.1:9000;
+ fastcgi_index index.php;
+ include fastcgi_params;
+ fastcgi_param SCRIPT_FILENAME $request_filename;