aboutsummaryrefslogblamecommitdiffstats
path: root/roles/nextcloud/templates/nextcloud.conf.httpd.j2
blob: bcf923d760546ded82cfbaf57c99a40697405ed1 (plain) (tree) 
92a8f04






a0b7a11


92a8f04











































1
2
3
4
5
6

7
8

9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51






                                             

                                            










































                                                                     
server "cloud.{{ global.domain_name }}" {
	listen on * port {{ nextcloud_port }}

	root "/nextcloud"
	directory index index.php

	connection max request body 10485760

	hsts max-age 15768000

	# deny access to confidential data/programs first
	location "/.ht*"        { block }
	location "/.user*"      { block }
	location "/3rdparty*"   { block }
	location "/README"      { block }
	location "/autotest*"   { block }
	location "/build*"      { block }
	location "/config*"     { block }
	location "/console*"    { block }
	location "/data*"       { block }
	location "/db_*"        { block }
	location "/indie*"      { block }
	location "/issue*"      { block }
	location "/lib*"        { block }
	location "/occ*"        { block }
	location "/templates*"  { block }
	location "/tests*"      { block }

	location "/*.php" {
		fastcgi socket "/run/php-fpm.sock"
	} 
	location "/*.php[/?]*" {    
		fastcgi socket "/run/php-fpm.sock"
	}

	location "/.well-known/host-meta" {
		block return 301 "/public.php?service=host-meta"
	}
	location "/.well-known/host-meta.json" {
		block return 301 "/public.php?service=host-meta-json"
	}
	location "/.well-known/webfinger" {
		block return 301 "/public.php?service=webfinger"
	}
	location "/.well-known/carddav" {
		block return 301 "/remote.php/dav/"
	}
	location "/.well-known/caldav" {
		block return 301 "/remote.php/dav/"
	}
}
remember that computers suck.