nixos/nextcloud: update config for "urgent security issue"
https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm/
This commit is contained in:
parent
e2383999f0
commit
f6c45bff6d
@ -467,7 +467,7 @@ in {
|
|||||||
};
|
};
|
||||||
"/" = {
|
"/" = {
|
||||||
priority = 200;
|
priority = 200;
|
||||||
extraConfig = "rewrite ^ /index.php$request_uri;";
|
extraConfig = "rewrite ^ /index.php;";
|
||||||
};
|
};
|
||||||
"~ ^/store-apps" = {
|
"~ ^/store-apps" = {
|
||||||
priority = 201;
|
priority = 201;
|
||||||
@ -494,6 +494,7 @@ in {
|
|||||||
extraConfig = ''
|
extraConfig = ''
|
||||||
include ${config.services.nginx.package}/conf/fastcgi.conf;
|
include ${config.services.nginx.package}/conf/fastcgi.conf;
|
||||||
fastcgi_split_path_info ^(.+\.php)(\\/.*)$;
|
fastcgi_split_path_info ^(.+\.php)(\\/.*)$;
|
||||||
|
try_files $fastcgi_script_name =404;
|
||||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||||
fastcgi_param HTTPS ${if cfg.https then "on" else "off"};
|
fastcgi_param HTTPS ${if cfg.https then "on" else "off"};
|
||||||
fastcgi_param modHeadersAvailable true;
|
fastcgi_param modHeadersAvailable true;
|
||||||
|
Loading…
Reference in New Issue
Block a user