diff --git a/013-projectsend b/013-projectsend deleted file mode 100644 index f91ce57..0000000 --- a/013-projectsend +++ /dev/null @@ -1,110 +0,0 @@ -#upstream php-handler { -# #server 127.0.0.1:9000; -# server unix:/var/run/php/php7.4-fpm.sock; -#} - -server { - listen 80; - #listen [::]:80; - server_name ps.solusar.de; - - # Enforce HTTPS - return 301 https://$server_name$request_uri; -} - -server { - listen 443 ssl http2; - #listen [::]:443 ssl http2; - server_name ps.solusar.de; - - #ssl on; - ssl_certificate /etc/letsencrypt/live/nc.solusar.de/fullchain.pem; - ssl_trusted_certificate /etc/letsencrypt/live/nc.solusar.de/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/nc.solusar.de/privkey.pem; - - ssl_dhparam /etc/myssl/dh4096.pem; - ssl_protocols TLSv1.2; - ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK'; - ssl_session_timeout 5m; - ssl_prefer_server_ciphers on; - ssl_session_cache shared:SSL:50m; - - add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; - #add_header X-Frame-Options "SAMEORIGIN"; - #add_header X-Content-Type-Options nosniff; - #add_header X-XSS-Protection "1; mode=block"; - #add_header Content-Security-Policy "default-src 'none'; font-src 'self'; script-src 'self' 'unsafe-inline' https://nc.solusar.de; img-src * data:; object-src 'none'; style-src 'self' 'unsafe-inline' 'sha256-bQfd5MwpJ1ZxnVh373acxlqXQ8VwM88QhEHNuQ0ppNg='; frame-src 'self'; connect-src 'self'; form-action 'self'; base-uri 'self';frame-ancestors 'self';"; - - # set max upload size - client_max_body_size 2048M; - fastcgi_buffers 64 4K; - - # Enable gzip but do not remove ETag headers - #gzip on; - #gzip_vary on; - #gzip_comp_level 4; - #gzip_min_length 256; - #gzip_proxied expired no-cache no-store private no_last_modified no_etag auth; - #gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy; - - # Pagespeed is not supported by Nextcloud, so if your server is built - # with the `ngx_pagespeed` module, uncomment this line to disable it. - #pagespeed off; - - # HTTP response headers borrowed from Nextcloud `.htaccess` - add_header Referrer-Policy "no-referrer" always; - add_header X-Content-Type-Options "nosniff" always; - add_header X-Download-Options "noopen" always; - add_header X-Frame-Options "SAMEORIGIN" always; - add_header X-Permitted-Cross-Domain-Policies "none" always; - add_header X-Robots-Tag "none" always; - add_header X-XSS-Protection "1; mode=block" always; - - # Remove X-Powered-By, which is an information leak - fastcgi_hide_header X-Powered-By; - - # Path to the root of your installation - root /var/www/vhosts/solusar.de/subdomains/projectsend; - - # Specify how to handle directories -- specifying `/index.php$request_uri` - # here as the fallback means that Nginx always exhibits the desired behaviour - # when a client requests a path that corresponds to a directory that exists - # on the server. In particular, if that directory contains an index.php file, - # that file is correctly served; if it doesn't, then the request is passed to - # the front-end controller. This consistent behaviour means that we don't need - # to specify custom rules for certain paths (e.g. images and other assets, - # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus - # `try_files $uri $uri/ /index.php$request_uri` - # always provides the desired behaviour. - index index.php index.html /index.php$request_uri; - - # Default Cache-Control policy - expires 1m; - - # Ensure this block, which passes PHP files to the PHP process, is above the blocks - # which handle static assets (as seen below). If this block is not declared first, - # then Nginx will encounter an infinite rewriting loop when it prepends `/index.php` - # to the URI, resulting in a HTTP 500 error response. - location ~ \.php(?:$|/) { - fastcgi_split_path_info ^(.+?\.php)(/.*)$; - set $path_info $fastcgi_path_info; - - try_files $fastcgi_script_name =404; - - include fastcgi_params; - fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; - fastcgi_param PATH_INFO $path_info; - fastcgi_param HTTPS on; - - fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice - fastcgi_param front_controller_active true; # Enable pretty urls - fastcgi_pass php-handler; - - fastcgi_intercept_errors on; - fastcgi_request_buffering off; - } - - #location / { - # try_files $uri $uri/ /index.php$request_uri; - #} -}