Update nextcloud app to use separate proxy and fpm services

2021-04-30 20:20:22 -04:00
parent a7012abf28
commit 1490774f4a
3 changed files with 83 additions and 6 deletions
--- a/resources/nginx/nextcloud-proxy.conf
+++ b/resources/nginx/nextcloud-proxy.conf
@@ -0,0 +1,50 @@
+server {
+        listen 80;
+        root /usr/share/nginx/nextcloud;
+        index index.php index.html index.htm;
+
+        location / {
+            try_files $uri $uri/ =404;
+        }
+
+        location ~ [^/]\.php(/|$) {
+            fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+            if (!-f $document_root$fastcgi_script_name) {
+                return 404;
+            }
+
+            # Mitigate https://httpoxy.org/ vulnerabilities
+            fastcgi_param HTTP_PROXY "";
+
+            fastcgi_pass server:9000;
+            fastcgi_index index.php;
+
+            fastcgi_param   QUERY_STRING            $query_string;
+            fastcgi_param   REQUEST_METHOD          $request_method;
+            fastcgi_param   CONTENT_TYPE            $content_type;
+            fastcgi_param   CONTENT_LENGTH          $content_length;
+
+            fastcgi_param   SCRIPT_FILENAME         /var/www/html$fastcgi_script_name;
+            fastcgi_param   SCRIPT_NAME             $fastcgi_script_name;
+            fastcgi_param   PATH_INFO               $fastcgi_path_info;
+            fastcgi_param   PATH_TRANSLATED         /var/www/html$fastcgi_path_info;
+            fastcgi_param   REQUEST_URI             $request_uri;
+            fastcgi_param   DOCUMENT_URI            $document_uri;
+            fastcgi_param   DOCUMENT_ROOT           /var/www/html/;
+            fastcgi_param   SERVER_PROTOCOL         $server_protocol;
+
+            fastcgi_param   GATEWAY_INTERFACE       CGI/1.1;
+            fastcgi_param   SERVER_SOFTWARE         nginx/$nginx_version;
+
+            fastcgi_param   REMOTE_ADDR             $remote_addr;
+            fastcgi_param   REMOTE_PORT             $remote_port;
+            fastcgi_param   SERVER_ADDR             $server_addr;
+            fastcgi_param   SERVER_PORT             $server_port;
+            fastcgi_param   SERVER_NAME             $server_name;
+
+            fastcgi_param   HTTPS                   $https;
+
+            # PHP only, required if PHP was built with --enable-force-cgi-redirect
+            fastcgi_param   REDIRECT_STATUS         200;
+      }
+}