diff --git a/nginx.example.com.conf b/nginx.example.com.conf index b67a8a5df..834b1fecd 100644 --- a/nginx.example.com.conf +++ b/nginx.example.com.conf @@ -8,6 +8,10 @@ server { server_name example.com; root /var/www/example.com/public_html; + + add_header X-Frame-Options "SAMEORIGIN"; + add_header X-XSS-Protection "1; mode=block"; + add_header X-Content-Type-Options "nosniff"; index index.html index.htm index.php; @@ -31,21 +35,19 @@ server { location ~ ^/(modules|vendor)\/(.*)\.((?!ico|gif|jpg|jpeg|png|js|css|less|sass|font|woff|woff2|eot|ttf|svg).)*$ { deny all; } + + error_page 404 /index.php; # Pass PHP Scripts To FastCGI Server location ~ \.php$ { - try_files $uri /index.php =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/var/run/php/php7.2-fpm.sock; # Depends On The PHP Version fastcgi_index index.php; - include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; - - fastcgi_intercept_errors off; - fastcgi_buffer_size 16k; - fastcgi_buffers 4 16k; - fastcgi_connect_timeout 300; - fastcgi_send_timeout 300; - fastcgi_read_timeout 300; + include fastcgi_params; } -} + + location ~ /\.(?!well-known).* { + deny all; + } +} \ No newline at end of file