]>
Commit | Line | Data |
---|---|---|
453f4653 V |
1 | user www-data www-data; |
2 | daemon off; | |
3 | worker_processes 4; | |
4 | ||
5 | events { | |
6 | worker_connections 768; | |
7 | } | |
8 | ||
9 | http { | |
10 | include mime.types; | |
11 | default_type application/octet-stream; | |
12 | keepalive_timeout 20; | |
13 | ||
14 | index index.html index.php; | |
15 | ||
16 | server { | |
17 | listen 80; | |
18 | root /var/www/shaarli; | |
19 | ||
20 | access_log /var/log/nginx/shaarli.access.log; | |
21 | error_log /var/log/nginx/shaarli.error.log; | |
22 | ||
23 | location /phpinfo/ { | |
24 | # add a PHP info page for convenience | |
25 | fastcgi_pass unix:/var/run/php5-fpm.sock; | |
26 | fastcgi_index index.php; | |
27 | fastcgi_param SCRIPT_FILENAME /var/www/index.php; | |
28 | include fastcgi_params; | |
29 | } | |
30 | ||
31 | location ~ /\. { | |
32 | # deny access to dotfiles | |
33 | access_log off; | |
34 | log_not_found off; | |
35 | deny all; | |
36 | } | |
37 | ||
38 | location ~ ~$ { | |
39 | # deny access to temp editor files, e.g. "script.php~" | |
40 | access_log off; | |
41 | log_not_found off; | |
42 | deny all; | |
43 | } | |
44 | ||
45 | location ~* \.(?:ico|css|js|gif|jpe?g|png)$ { | |
46 | # cache static assets | |
47 | expires max; | |
48 | add_header Pragma public; | |
49 | add_header Cache-Control "public, must-revalidate, proxy-revalidate"; | |
50 | } | |
51 | ||
52 | location ~ (index)\.php$ { | |
53 | # filter and proxy PHP requests to PHP-FPM | |
54 | fastcgi_pass unix:/var/run/php5-fpm.sock; | |
55 | fastcgi_index index.php; | |
56 | include fastcgi.conf; | |
57 | } | |
58 | ||
59 | location ~ \.php$ { | |
60 | # deny access to all other PHP scripts | |
61 | deny all; | |
62 | } | |
63 | } | |
64 | } |