mbess/web-utils
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Activity Actions

fix: root path in nginx and forbid locations

Browse source
This commit is contained in:
Matthieu Bessat 2021-08-08 19:53:02 +02:00
parent 14165f6e04
commit 09608ab8bb
2 changed files with 31 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
configure_nginx.php
View file

@ -20,10 +20,8 @@ foreach ($config['modules'] as $moduleName => $moduleConfig) {
$domains = array_map(fn ($d) => $d . '.' . $config['domain'], $domains); $domains = array_map(fn ($d) => $d . '.' . $config['domain'], $domains);
$serverName = implode(' ', $domains); $serverName = implode(' ', $domains);
$rootPath = $appBasePath . '/' . $domains[0];
$nginxConfig = $template; $nginxConfig = $template;
$nginxConfig = str_replace('{{ROOT_PATH}}', $rootPath, $nginxConfig); $nginxConfig = str_replace('{{ROOT_PATH}}', $appBasePath, $nginxConfig);
$nginxConfig = str_replace('{{SERVER_NAME}}', $serverName, $nginxConfig); $nginxConfig = str_replace('{{SERVER_NAME}}', $serverName, $nginxConfig);
$nginxConfig = str_replace('{{PHP_SOCKET}}', $phpSocket, $nginxConfig); $nginxConfig = str_replace('{{PHP_SOCKET}}', $phpSocket, $nginxConfig);

30
nginx.conf.template
View file

@ -5,6 +5,9 @@ server {
location / { location / {
try_files $uri $uri/ /index.php?$args; try_files $uri $uri/ /index.php?$args;
} }
location /config.php {
return 404;
}
location ~ \.php$ { location ~ \.php$ {
fastcgi_pass unix:{{PHP_SOCKET}}; fastcgi_pass unix:{{PHP_SOCKET}};
fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_split_path_info ^(.+\.php)(/.+)$;
@ -12,4 +15,31 @@ server {
include fastcgi_params; include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root/$fastcgi_script_name; fastcgi_param SCRIPT_FILENAME $document_root/$fastcgi_script_name;
} }
location ^~ /wp-admin {
return 403;
}
location ^~ /super-cool-page {
return 403;
}
location ^~ /load_config.php {
return 403;
}
location ^~ /config.php {
return 403;
}
location ^~ /config.example.php {
return 403;
}
location ^~ /utils.php {
return 403;
}
location ^~ /tmp {
return 403;
}
location ^~ /modules {
return 403;
}
location ^~ /configure_nginx.php {
return 403;
}
} }