changed php path and removed ssl stuff, they should be handled by reverse proxy outside the container

This commit is contained in:
Shihaam Abdul Rahman 2022-10-07 16:16:56 +05:00
parent e7739d8a06
commit 8ce851400a
Signed by: shihaam
GPG Key ID: 3B007D22E5584980

View File

@ -1,6 +1,5 @@
upstream php-handler { upstream php-handler {
server 127.0.0.1:9000; unix:/run/php/php8.1-fpm.sock;
#server unix:/var/run/php/php7.4-fpm.sock;
} }
# Set the `immutable` cache control options only for assets with a cache busting `v` argument # Set the `immutable` cache control options only for assets with a cache busting `v` argument
@ -12,29 +11,11 @@ map $arg_v $asset_immutable {
server { server {
listen 80; listen 80;
listen [::]:80; server_name _;
server_name cloud.example.com;
# Prevent nginx HTTP Server Detection
server_tokens off;
# Enforce HTTPS
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name cloud.example.com;
# Path to the root of your installation # Path to the root of your installation
root /var/www/nextcloud; root /var/www/nextcloud;
# Use Mozilla's guidelines for SSL/TLS settings
# https://mozilla.github.io/server-side-tls/ssl-config-generator/
ssl_certificate /etc/ssl/nginx/cloud.example.com.crt;
ssl_certificate_key /etc/ssl/nginx/cloud.example.com.key;
# Prevent nginx HTTP Server Detection # Prevent nginx HTTP Server Detection
server_tokens off; server_tokens off;
@ -47,8 +28,8 @@ server {
#add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always; #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
# set max upload size and increase upload timeout: # set max upload size and increase upload timeout:
client_max_body_size 512M; client_max_body_size 4G;
client_body_timeout 300s; client_body_timeout 600s;
fastcgi_buffers 64 4K; fastcgi_buffers 64 4K;
# Enable gzip but do not remove ETag headers # Enable gzip but do not remove ETag headers
@ -148,7 +129,7 @@ server {
fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice
fastcgi_param front_controller_active true; # Enable pretty urls fastcgi_param front_controller_active true; # Enable pretty urls
fastcgi_pass php-handler; fastcgi_pass unix:/run/php/php8.1-fpm.sock;
fastcgi_intercept_errors on; fastcgi_intercept_errors on;
fastcgi_request_buffering off; fastcgi_request_buffering off;