Compare commits
4 Commits
Author | SHA1 | Date |
---|---|---|
|
ecf5c57a4f | |
|
d648232d38 | |
|
33f60e2d81 | |
|
8ecd64af13 |
|
@ -6,37 +6,5 @@ server {
|
|||
ssl_certificate /etc/nginx/ssl/org.chain.crt;
|
||||
ssl_certificate_key /etc/nginx/ssl/org.key.pem;
|
||||
|
||||
root /opt/moodle;
|
||||
|
||||
index index.html index.htm index.php;
|
||||
|
||||
error_page 404 /error/index.php; error_page 403 =404 /error/index.php;
|
||||
|
||||
location ~ [^/]\.php(/|$) {
|
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||
fastcgi_index index.php;
|
||||
fastcgi_pass unix:/run/php/php8.0-fpm_moodle.sock;
|
||||
include fastcgi_params;
|
||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||
fastcgi_read_timeout 300;
|
||||
proxy_read_timeout 300;
|
||||
}
|
||||
|
||||
location /dataroot/ {
|
||||
internal;
|
||||
alias /var/opt/moodledata/; # ensure the path ends with /
|
||||
}
|
||||
|
||||
# Hide all dot files but allow "Well-Known URIs" as per RFC 5785
|
||||
location ~ /\.(?!well-known).* {
|
||||
return 404;
|
||||
}
|
||||
|
||||
# This should be after the php fpm rule and very close to the last nginx ruleset.
|
||||
# Don't allow direct access to various internal files. See MDL-69333
|
||||
location ~ (/vendor/|/node_modules/|composer\.json|/readme|/README|readme\.txt|/upgrade\.txt|db/install\.xml|/fixtures/|/behat/|phpunit\.xml|\.lock|environment\.xml) {
|
||||
deny all;
|
||||
return 404;
|
||||
}
|
||||
return 307 https://canvas.libraryofcode.dev$request_uri;
|
||||
}
|
||||
|
|
|
@ -0,0 +1,13 @@
|
|||
server {
|
||||
listen 443 ssl http2;
|
||||
listen [::]:443 ssl http2;
|
||||
server_name smm.libraryofcode.org;
|
||||
|
||||
ssl_certificate /etc/nginx/ssl/org.chain.crt;
|
||||
ssl_certificate_key /etc/nginx/ssl/org.key.pem;
|
||||
|
||||
#limit_req zone=one burst=15;
|
||||
location / {
|
||||
proxy_pass http://localhost:8080;
|
||||
}
|
||||
}
|
|
@ -1,7 +1,7 @@
|
|||
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
|
||||
|
||||
# Server Information
|
||||
smtpd_banner = $myhostname LIBRARY OF CODE SP-US STAFF SVCS | ESMTP (Debian/GNU)
|
||||
smtpd_banner = $myhostname LIBRARY OF CODE INC STAFF SVCS | ESMTP (Debian/GNU)
|
||||
myhostname = staff.libraryofcode.org
|
||||
myorigin = /etc/mailname
|
||||
mydestination = $myhostname
|
||||
|
|
|
@ -17,6 +17,19 @@ smtp inet n - y - - smtpd
|
|||
#dnsblog unix - - y - 0 dnsblog
|
||||
#tlsproxy unix - - y - 0 tlsproxy
|
||||
|
||||
5878 inet n - y - - smtpd
|
||||
-o syslog_name=postfix/submission5878
|
||||
-o smtpd_tls_security_level=encrypt
|
||||
-o smtpd_sasl_auth_enable=yes
|
||||
-o smtpd_reject_unlisted_recipient=no
|
||||
-o smtpd_client_restrictions=$mua_client_restrictions
|
||||
-o smtpd_helo_restrictions=$mua_helo_restrictions
|
||||
-o smtpd_sender_restrictions=$mua_sender_restrictions
|
||||
-o smtpd_recipient_restrictions=
|
||||
-o smtpd_relay_restrictions=permit_sasl_authenticated,reject
|
||||
-o milter_macro_daemon_name=ORIGINATING
|
||||
-o cleanup_service_name=privclean
|
||||
|
||||
submission inet n - y - - smtpd
|
||||
-o syslog_name=postfix/submission
|
||||
-o smtpd_tls_security_level=encrypt
|
||||
|
|
Loading…
Reference in New Issue