|
|
@@ -7,63 +7,62 @@ server {
|
|
|
access_log /var/log/nginx/domains/%domain%.bytes bytes;
|
|
|
error_log /var/log/nginx/domains/%domain%.error.log error;
|
|
|
|
|
|
- location = /favicon.ico {
|
|
|
- log_not_found off;
|
|
|
- access_log off;
|
|
|
- }
|
|
|
-
|
|
|
- location = /robots.txt {
|
|
|
- allow all;
|
|
|
- log_not_found off;
|
|
|
- access_log off;
|
|
|
- }
|
|
|
+ location @rewrite {
|
|
|
+ rewrite ^/(.*)$ /index.php?q=$1;
|
|
|
+ }
|
|
|
+
|
|
|
+ location / {
|
|
|
+ location = /favicon.ico {
|
|
|
+ log_not_found off;
|
|
|
+ access_log off;
|
|
|
+ }
|
|
|
|
|
|
- location ~* \.(txt|log)$ {
|
|
|
- allow 192.168.0.0/16;
|
|
|
- deny all;
|
|
|
- }
|
|
|
+ location = /robots.txt {
|
|
|
+ allow all;
|
|
|
+ log_not_found off;
|
|
|
+ access_log off;
|
|
|
+ }
|
|
|
|
|
|
- location ~ \..*/.*\.php$ {
|
|
|
- return 403;
|
|
|
+ location ~ \..*/.*\.php$ {
|
|
|
+ return 403;
|
|
|
}
|
|
|
|
|
|
- location ~ ^/sites/.*/private/ {
|
|
|
- return 403;
|
|
|
- }
|
|
|
-
|
|
|
- location ~ ^/sites/[^/]+/files/.*\.php$ {
|
|
|
- deny all;
|
|
|
- }
|
|
|
-
|
|
|
- location / {
|
|
|
+ location ~ ^/sites/.*/private/ {
|
|
|
+ return 403;
|
|
|
+ }
|
|
|
+
|
|
|
+ location ~ ^/sites/[^/]+/files/.*\.php$ {
|
|
|
+ deny all;
|
|
|
+ }
|
|
|
+
|
|
|
+ location ~ /vendor/.*\.php$ {
|
|
|
+ deny all;
|
|
|
+ return 404;
|
|
|
+ }
|
|
|
+
|
|
|
try_files $uri /index.php?$query_string;
|
|
|
- }
|
|
|
-
|
|
|
- location ~ /vendor/.*\.php$ {
|
|
|
- deny all;
|
|
|
- return 404;
|
|
|
- }
|
|
|
-
|
|
|
- location ~ ^/sites/.*/files/styles/ {
|
|
|
- try_files $uri @rewrite;
|
|
|
- }
|
|
|
+
|
|
|
+ location ~ ^/sites/.*/files/styles/ {
|
|
|
+ try_files $uri @rewrite;
|
|
|
+ }
|
|
|
|
|
|
- location ~ ^(/[a-z\-]+)?/system/files/ {
|
|
|
- try_files $uri /index.php?$query_string;
|
|
|
- }
|
|
|
+ location ~ ^(/[a-z\-]+)?/system/files/ {
|
|
|
+ try_files $uri /index.php?$query_string;
|
|
|
+ }
|
|
|
|
|
|
- location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
|
|
|
- try_files $uri @rewrite;
|
|
|
- expires max;
|
|
|
- log_not_found off;
|
|
|
- }
|
|
|
+ location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
|
|
|
+ try_files $uri @rewrite;
|
|
|
+ expires max;
|
|
|
+ log_not_found off;
|
|
|
+ }
|
|
|
|
|
|
- location ~ '\.php$|^/update.php' {
|
|
|
- fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
|
|
|
- fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
|
- fastcgi_pass %backend_lsnr%;
|
|
|
- include /etc/nginx/fastcgi_params;
|
|
|
- }
|
|
|
+ location ~ '\.php$|^/update.php' {
|
|
|
+ fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
|
|
|
+ fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
|
+ fastcgi_pass %backend_lsnr%;
|
|
|
+ include /etc/nginx/fastcgi_params;
|
|
|
+ }
|
|
|
+ }
|
|
|
|
|
|
error_page 403 /error/404.html;
|
|
|
error_page 404 /error/404.html;
|