Merge pull request #71963 from dtzWill/security/nextcloud17-php-and-nginx-config

Address nextcloud "urgent security issue" w/nginx per upstream recs
This commit is contained in:
Maximilian Bosch 2019-10-25 19:12:18 +02:00 committed by GitHub
commit 4a5c0e029d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -467,7 +467,7 @@ in {
};
"/" = {
priority = 200;
extraConfig = "rewrite ^ /index.php$request_uri;";
extraConfig = "rewrite ^ /index.php;";
};
"~ ^/store-apps" = {
priority = 201;
@ -494,6 +494,7 @@ in {
extraConfig = ''
include ${config.services.nginx.package}/conf/fastcgi.conf;
fastcgi_split_path_info ^(.+\.php)(\\/.*)$;
try_files $fastcgi_script_name =404;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS ${if cfg.https then "on" else "off"};
fastcgi_param modHeadersAvailable true;