|
@@ -1,14 +1,14 @@
|
|
|
server {
|
|
|
listen 80;
|
|
|
server_name oneinstack.com;
|
|
|
- set $MAGE_ROOT /data/wwwroot/default;
|
|
|
+ set $MAGE_ROOT /data/wwwroot/default;
|
|
|
root $MAGE_ROOT/pub;
|
|
|
index index.php;
|
|
|
autoindex off;
|
|
|
charset UTF-8;
|
|
|
error_page 404 403 /errors/404.php;
|
|
|
#add_header "X-UA-Compatible" "IE=Edge";
|
|
|
-
|
|
|
+
|
|
|
# PHP entry point for setup application
|
|
|
location ~* ^/setup($|/) {
|
|
|
root $MAGE_ROOT;
|
|
@@ -19,16 +19,16 @@ server {
|
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
|
include fastcgi_params;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location ~ ^/setup/(?!pub/). {
|
|
|
deny all;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location ~ ^/setup/pub/ {
|
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
|
}
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
# PHP entry point for update application
|
|
|
location ~* ^/update($|/) {
|
|
|
root $MAGE_ROOT;
|
|
@@ -40,21 +40,21 @@ server {
|
|
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
|
|
include fastcgi_params;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
# Deny everything but index.php
|
|
|
location ~ ^/update/(?!pub/). {
|
|
|
deny all;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location ~ ^/update/pub/ {
|
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
|
}
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location / {
|
|
|
try_files $uri $uri/ /index.php?$args;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location /pub/ {
|
|
|
location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
|
|
|
deny all;
|
|
@@ -62,7 +62,7 @@ server {
|
|
|
alias $MAGE_ROOT/pub/;
|
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location /static/ {
|
|
|
# Uncomment the following line in production mode
|
|
|
# expires max;
|
|
@@ -70,7 +70,7 @@ server {
|
|
|
location ~ ^/static/version {
|
|
|
rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
|
|
|
add_header Cache-Control "public";
|
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
@@ -94,13 +94,13 @@ server {
|
|
|
}
|
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location /media/ {
|
|
|
try_files $uri $uri/ /get.php?$args;
|
|
|
location ~ ^/media/theme_customization/.*\.xml {
|
|
|
deny all;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
|
|
|
add_header Cache-Control "public";
|
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
@@ -115,35 +115,35 @@ server {
|
|
|
}
|
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location /media/customer/ {
|
|
|
deny all;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location /media/downloadable/ {
|
|
|
deny all;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
location /media/import/ {
|
|
|
deny all;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
# PHP entry point for main application
|
|
|
location ~ (index|get|static|report|404|503)\.php$ {
|
|
|
try_files $uri =404;
|
|
|
fastcgi_pass unix:/dev/shm/php-cgi.sock;
|
|
|
fastcgi_buffers 1024 4k;
|
|
|
-
|
|
|
+
|
|
|
fastcgi_param PHP_FLAG "session.auto_start=off \n suhosin.session.cryptua=off";
|
|
|
fastcgi_param PHP_VALUE "memory_limit=768M \n max_execution_time=600";
|
|
|
fastcgi_read_timeout 600s;
|
|
|
fastcgi_connect_timeout 600s;
|
|
|
-
|
|
|
+
|
|
|
fastcgi_index index.php;
|
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
|
include fastcgi_params;
|
|
|
}
|
|
|
-
|
|
|
+
|
|
|
gzip on;
|
|
|
gzip_disable "msie6";
|
|
|
gzip_comp_level 6;
|
|
@@ -163,7 +163,7 @@ server {
|
|
|
application/xml+rss
|
|
|
image/svg+xml;
|
|
|
gzip_vary on;
|
|
|
-
|
|
|
+
|
|
|
# Banned locations (only reached if the earlier PHP entry point regexes don't match)
|
|
|
location ~* (\.php$|\.htaccess$|\.git) {
|
|
|
deny all;
|