role/common-web: Upgrade baseline to Debian 10.

1 files changed, 11 insertions, 7 deletions

diff --git a/roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf b/roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf
index 9668bb8..48ebc63 100644
--- a/roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf
+++ b/roles/common-web/files/etc/nginx/snippets/fastcgi-php.conf
@@ -1,10 +1,14 @@
-# cf. http://wiki.nginx.org/Pitfalls#Passing_Uncontrolled_Requests_to_PHP
+# regex to split $uri to $fastcgi_script_name and $fastcgi_path
+fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+
+# Check that the PHP script exists before passing it
 try_files $fastcgi_script_name =404;
 
-include snippets/fastcgi.conf;
-# required if PHP was built with --enable-force-cgi-redirect
-fastcgi_param REDIRECT_STATUS 200;
+# Bypass the fact that try_files resets $fastcgi_path_info
+# see: http://trac.nginx.org/nginx/ticket/321
+set $path_info $fastcgi_path_info;
+fastcgi_param PATH_INFO $path_info;
 
-fastcgi_intercept_errors on;
-fastcgi_read_timeout     14400;
-fastcgi_pass             unix:/var/run/php/php7.0-fpm.sock;
+fastcgi_index index.php;
+include       snippets/fastcgi.conf;
+fastcgi_pass  unix:/run/php/php7.3-fpm.sock;