X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mods%2Fsample-nginx.config;h=b90e1fe29f710e011ee9681140fa0d5d77358775;hb=79205b83779c00a325b2f740fa2b7528308a46b5;hp=e4ce902515e4c858bc2ff09da3e81c1dd2f11af3;hpb=6cf50a14fae25210a0cdb617c29d549abcfde9ac;p=friendica.git diff --git a/mods/sample-nginx.config b/mods/sample-nginx.config index e4ce902515..b90e1fe29f 100644 --- a/mods/sample-nginx.config +++ b/mods/sample-nginx.config @@ -84,14 +84,14 @@ server { # rewrite to front controller as default rule location / { - try_file $uri /index.php?pagename=$uri&$args; + try_files $uri /index.php?pagename=$uri&$args; } # make sure webfinger and other well known services aren't blocked # by denying dot files and rewrite request to the front controller location ^~ /.well-known/ { allow all; - try_files $uri /index.php?pagename=$uri&$args; + rewrite ^ /index.php?pagename=$uri; } include mime.types; @@ -127,6 +127,9 @@ server { include fastcgi_params; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + + fastcgi_buffers 16 16k; + fastcgi_buffer_size 32k; } # block these file types @@ -138,4 +141,9 @@ server { location ~ /\. { deny all; } + + # deny access to the CLI scripts + location ^~ /bin { + deny all; + } }