diff --git a/Nginx/Server Blocks/edu.libraryofcode.org.conf b/Nginx/Server Blocks/edu.libraryofcode.org.conf index 6ac46aa..7d80d52 100644 --- a/Nginx/Server Blocks/edu.libraryofcode.org.conf +++ b/Nginx/Server Blocks/edu.libraryofcode.org.conf @@ -4,64 +4,18 @@ server { server_name edu.libraryofcode.org; ssl_certificate /etc/nginx/ssl/org.chain.crt; - ssl_certificate_key /etc/nginx/ssl/org.key.pem; + ssl_certificate_key /etc/nginx/ssl/org.key.pem; - location / { - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header X-Frame-Options SAMEORIGIN; - proxy_pass http://localhost:7560; - proxy_read_timeout 90; - } + root /opt/moodle; + + index index.html index.htm index.php; + + location ~ [^/]\.php(/|$) { + fastcgi_split_path_info ^(.+\.php)(/.+)$; + fastcgi_index index.php; + fastcgi_pass /run/php/php8.0-fpm_moodle.sock; + include fastcgi_params; + fastcgi_param PATH_INFO $fastcgi_path_info; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + } } - -server { - listen 443 ssl http2; - listen [::]:443 ssl http2; - server_name studio.libraryofcode.org; - - ssl_certificate /etc/nginx/ssl/org.chain.crt; - ssl_certificate_key /etc/nginx/ssl/org.key.pem; - - client_max_body_size 100M; - - location / { - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header X-Frame-Options SAMEORIGIN; - proxy_pass http://localhost:7560; - proxy_read_timeout 90; - } -} - - -#server { -# listen 443 ssl http2; -# listen [::]:443 ssl http2; -# server_name edu.libraryofcode.org; - -# ssl_certificate /etc/nginx/ssl/org.chain.crt; -# ssl_certificate_key /etc/nginx/ssl/org.key.pem; - - -# root /opt/canvas/public; -# charset utf-8; -# include mime.types; -# client_max_body_size 5000M; -# default_type application/octet-stream; -# access_log /var/log/nginx/canvas.access.log; -# error_log /var/log/nginx/canvas.error.log; -# passenger_ruby /usr/local/bin/ruby2.4; -# passenger_load_shell_envvars off; -# passenger_min_instances 8; - #passenger_log_level 4; -# passenger_start_timeout 300; -# passenger_enabled on; - #passenger_pre_start https://edu.libraryofcode.org/; -# rails_env production; -#} - diff --git a/Nginx/Server Blocks/internships.libraryofcode.org.conf b/Nginx/Server Blocks/internships.libraryofcode.org.conf new file mode 100644 index 0000000..abfc5aa --- /dev/null +++ b/Nginx/Server Blocks/internships.libraryofcode.org.conf @@ -0,0 +1,30 @@ +// php7.2-fpm-internships.sock + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name internships.libraryofcode.org; + + ssl_certificate /etc/nginx/ssl/org.chain.crt; + ssl_certificate_key /etc/nginx/ssl/org.key.pem; + + + location ~ [^/]\.php(/|$) { + fastcgi_split_path_info ^(.+\.php)(/.+)$; + fastcgi_index index.php; + fastcgi_pass /run/php/php7.2-fpm-internships.sock; + include fastcgi_params; + fastcgi_param PATH_INFO $fastcgi_path_info; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + } + + # Hide all dot files but allow "Well-Known URIs" as per RFC 5785 + location ~ /\.(?!well-known).* { + return 404; + } + + location ~ (/vendor/|/node_modules/|composer\.json|/readme|/README|readme\.txt|/upgrade\.txt|db/install\.xml|/fixtures/|/behat/|phpunit\.xml|\.lock|environment\.xml) { + deny all; + return 404; + } +}