docker/production/nginx.conf

   1 user www-data www-data;
   2 daemon off;
   3 worker_processes 4;
   4
   5 events {
   6     worker_connections  768;
   7 }
   8
   9 http {
  10     include            mime.types;
  11     default_type       application/octet-stream;
  12     keepalive_timeout  20;
  13
  14     client_max_body_size 10m;
  15
  16     index index.html index.php;
  17
  18     server {
  19         listen       80;
  20         root         /var/www/shaarli;
  21
  22         access_log  /var/log/nginx/shaarli.access.log;
  23         error_log   /var/log/nginx/shaarli.error.log;
  24
  25         location ~ /\. {
  26             # deny access to dotfiles
  27             access_log off;
  28             log_not_found off;
  29             deny all;
  30         }
  31
  32         location ~ ~$ {
  33             # deny access to temp editor files, e.g. "script.php~"
  34             access_log off;
  35             log_not_found off;
  36             deny all;
  37         }
  38
  39         location ~* \.(?:ico|css|js|gif|jpe?g|png)$ {
  40             # cache static assets
  41             expires    max;
  42             add_header Pragma public;
  43             add_header Cache-Control "public, must-revalidate, proxy-revalidate";
  44         }
  45
  46         location = /favicon.ico {
  47             # serve the Shaarli favicon from its custom location
  48             alias /var/www/shaarli/images/favicon.ico;
  49         }
  50
  51         location ~ (index)\.php$ {
  52             # filter and proxy PHP requests to PHP-FPM
  53             fastcgi_pass   unix:/var/run/php5-fpm.sock;
  54             fastcgi_index  index.php;
  55             include        fastcgi.conf;
  56         }
  57
  58         location ~ \.php$ {
  59             # deny access to all other PHP scripts
  60             deny all;
  61         }
  62     }
  63 }