diff options
author | Igor Scheller <igor.scheller@igorshp.de> | 2018-08-13 16:30:27 +0200 |
---|---|---|
committer | msquare <msquare@notrademark.de> | 2018-08-19 16:44:33 +0200 |
commit | bf6efe532c8f2de84e95b090911280a9b1b61ce8 (patch) | |
tree | 33f767dc22b8073e1151782b77d1a48b25ff28b0 /contrib/nginx | |
parent | 6415882b1c3c9ead00ccbab09e2292a22ce3d1d2 (diff) |
Added trusted proxies
Diffstat (limited to 'contrib/nginx')
-rw-r--r-- | contrib/nginx/nginx.conf | 43 |
1 files changed, 25 insertions, 18 deletions
diff --git a/contrib/nginx/nginx.conf b/contrib/nginx/nginx.conf index bbaf5824..96e4688f 100644 --- a/contrib/nginx/nginx.conf +++ b/contrib/nginx/nginx.conf @@ -1,35 +1,42 @@ error_log stderr; + events { worker_connections 1024; } + http { client_body_temp_path /tmp/client_body_temp; - fastcgi_temp_path /tmp/fastcgi_temp; - proxy_temp_path /tmp/proxy_temp; - scgi_temp_path /tmp/scgi_temp; - uwsgi_temp_path /tmp/uwsgi_temp; - + fastcgi_temp_path /tmp/fastcgi_temp; + proxy_temp_path /tmp/proxy_temp; + scgi_temp_path /tmp/scgi_temp; + uwsgi_temp_path /tmp/uwsgi_temp; + + map $http_x_forwarded_proto $forwarded_proto { + default $http_x_forwarded_proto; + https https; + } + server { - include mime.types; - access_log off; - listen [::]:80 ipv6only=off; - proxy_redirect off; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - index index.php; - root /var/www/html; - + include mime.types; + access_log off; + listen [::]:80 ipv6only=off; + proxy_redirect off; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $forwarded_proto; + index index.php; + root /var/www/html; + location / { try_files $uri $uri/ /index.php?$args; } location ~ \.php$ { - fastcgi_pass engelsystem:9000; + fastcgi_pass engelsystem:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; - fastcgi_param HTTPS on; - include fastcgi_params; + include fastcgi_params; } } } |