nixos/nextcloud: update config for "urgent security issue"

https://nextcloud.com/blog/urgent-security-issue-in-nginx-php-fpm/
This commit is contained in:
Will Dietz 2019-10-24 21:14:11 -05:00
parent e2383999f0
commit f6c45bff6d
No known key found for this signature in database
GPG Key ID: EBB0EA4124809D02

View File

@ -467,7 +467,7 @@ in {
}; };
"/" = { "/" = {
priority = 200; priority = 200;
extraConfig = "rewrite ^ /index.php$request_uri;"; extraConfig = "rewrite ^ /index.php;";
}; };
"~ ^/store-apps" = { "~ ^/store-apps" = {
priority = 201; priority = 201;
@ -494,6 +494,7 @@ in {
extraConfig = '' extraConfig = ''
include ${config.services.nginx.package}/conf/fastcgi.conf; include ${config.services.nginx.package}/conf/fastcgi.conf;
fastcgi_split_path_info ^(.+\.php)(\\/.*)$; fastcgi_split_path_info ^(.+\.php)(\\/.*)$;
try_files $fastcgi_script_name =404;
fastcgi_param PATH_INFO $fastcgi_path_info; fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS ${if cfg.https then "on" else "off"}; fastcgi_param HTTPS ${if cfg.https then "on" else "off"};
fastcgi_param modHeadersAvailable true; fastcgi_param modHeadersAvailable true;