docker_resources/nginx_default.conf
server {
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;
root /var/www/carbon_forum;
index index.html index.htm index.php;
# Make site accessible from http://localhost/
server_name localhost;
# nginx configuration
error_page 404 /404.php;
# Git folder vulnerability
location /.git {
deny all;
return 403;
}
location /controller {
deny all;
return 403;
}
location /docker_resources {
deny all;
return 403;
}
location /library {
deny all;
return 403;
}
location /service {
deny all;
return 403;
}
location /view {
deny all;
return 403;
}
# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
location ~ /\.ht {
deny all;
return 403;
}
# rewrite
location / {
try_files $uri $uri/ /index.php?$query_string;
}
# Only for nginx-naxsi used with nginx-naxsi-ui : process denied requests
#location /RequestDenied {
# proxy_pass http://127.0.0.1:8080;
#}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
#error_page 500 502 503 504 /50x.html;
#location = /50x.html {
# root /usr/share/nginx/html;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
# NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
# With php5-cgi alone:
#fastcgi_pass 127.0.0.1:9000;
# With php5-fpm:
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
}
}