Merge pull request #71963 from dtzWill/security/nextcloud17-php-and-nginx-config

Address nextcloud "urgent security issue" w/nginx per upstream recs
This commit is contained in:
Maximilian Bosch
2019-10-25 19:12:18 +02:00
committed by GitHub

View File

@@ -467,7 +467,7 @@ in {
};
"/" = {
priority = 200;
extraConfig = "rewrite ^ /index.php$request_uri;";
extraConfig = "rewrite ^ /index.php;";
};
"~ ^/store-apps" = {
priority = 201;
@@ -494,6 +494,7 @@ in {
extraConfig = ''
include ${config.services.nginx.package}/conf/fastcgi.conf;
fastcgi_split_path_info ^(.+\.php)(\\/.*)$;
try_files $fastcgi_script_name =404;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS ${if cfg.https then "on" else "off"};
fastcgi_param modHeadersAvailable true;