fu google

This commit is contained in:
Daniel Frank 2021-05-01 18:42:06 +02:00
parent cff35f130e
commit b05d227a04
Signed by: tokudan
GPG key ID: 063CCCAD04182D32
3 changed files with 17 additions and 8 deletions

View file

@ -13,12 +13,14 @@ in
root = "${hopglass-fe}";
extraConfig = ''
access_log off;
add_header Permissions-Policy "interest-cohort=()" always;
'';
locations."/" = {
extraConfig = ''
index index.html;
etag off;
add_header etag "\"${builtins.substring 11 32 hopglass-fe}\"";
add_header Permissions-Policy "interest-cohort=()" always;
'';
};
};

View file

@ -30,10 +30,12 @@ in
etag off;
add_header etag "\"${builtins.substring 11 32 postfixadminpkg}\"";
add_header Permissions-Policy "interest-cohort=()" always;
index index.php;
location ~* \.php$ {
add_header Permissions-Policy "interest-cohort=()" always;
# Zero-day exploit defense.
# http://forum.nginx.org/read.php?2,88845,page=3
# Won't work properly (404 error) if the file is not stored on this

View file

@ -34,23 +34,28 @@ in
root = "${roundcube}/public_html";
extraConfig = ''
access_log off;
add_header Permissions-Policy "interest-cohort=()" always;
'';
locations."~ ^/favicon.ico/.*$" = {
extraConfig = "try_files $uri kins/larry/images/$uri;";
extraConfig = ''
try_files $uri kins/larry/images/$uri;
add_header Permissions-Policy "interest-cohort=()" always;
'';
};
locations."/" = {
extraConfig = ''
index index.php;
try_files $uri /public/$uri /index.php$is_args$args;
etag off;
add_header etag "\"${builtins.substring 11 32 roundcube}\"";
add_header Permissions-Policy "interest-cohort=()" always;
'';
};
locations."~ [^/]\.php(/|$)" = {
extraConfig = ''
etag off;
add_header etag "\"${builtins.substring 11 32 roundcube}\"";
add_header Permissions-Policy "interest-cohort=()" always;
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {