summaryrefslogtreecommitdiffstats
path: root/roles/webmail/files/etc/nginx/sites-available
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2018-12-03 03:31:01 +0100
committerGuilhem Moulin <guilhem@fripost.org>2018-12-03 03:43:42 +0100
commit31ef7a78bc78a6ce2a24bcc6a4a11574bb2d5483 (patch)
tree6c02e4f235631ef07f85a7960bf6b9efa244f658 /roles/webmail/files/etc/nginx/sites-available
parentefe05260e09238cba0bc5197e044b58cca99d86a (diff)
Upgrade webmail baseline to Debian Stretch.
Diffstat (limited to 'roles/webmail/files/etc/nginx/sites-available')
-rw-r--r--roles/webmail/files/etc/nginx/sites-available/roundcube25
1 files changed, 10 insertions, 15 deletions
diff --git a/roles/webmail/files/etc/nginx/sites-available/roundcube b/roles/webmail/files/etc/nginx/sites-available/roundcube
index 1f347c5..8e0695d 100644
--- a/roles/webmail/files/etc/nginx/sites-available/roundcube
+++ b/roles/webmail/files/etc/nginx/sites-available/roundcube
@@ -18,8 +18,8 @@ server {
server {
- listen 443 spdy;
- listen [::]:443 spdy;
+ listen 443 ssl http2;
+ listen [::]:443 ssl http2;
server_name mail.fripost.org;
server_name webmail.fripost.org;
@@ -48,15 +48,11 @@ server {
access_log off;
}
- # Deny all attempts to access hidden files, or files under hidden
- # directories.
- location ~ /\. { return 404; }
-
access_log /var/log/nginx/roundcube.access.log;
error_log /var/log/nginx/roundcube.error.log info;
- index index.php;
client_max_body_size 64m;
+ location = / { index index.php; }
location = /index.php {
include snippets/fastcgi-php-ssl.conf;
@@ -67,15 +63,14 @@ server {
session.gc_maxlifetime=21600
session.gc_divisor=500
session.gc_probability=1";
- fastcgi_param PHP_ADMIN_VALUE "open_basedir=$document_root:/usr/share/roundcube:/etc/roundcube:/var/log/roundcube:/usr/share/php:/usr/share/javascript:/usr/share/tinymce:/usr/share/misc/magic
+ fastcgi_param PHP_ADMIN_VALUE "open_basedir=$document_root:/usr/share/roundcube:/etc/roundcube:/var/log/roundcube:/usr/share/php:/usr/share/javascript:/usr/share/tinymce:/usr/share/misc/magic:/dev
upload_tmp_dir=$document_root/temp";
}
- # Security rules
- location ~ ^/(README|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {
- return 404;
- }
- location ~ ^/(bin|SQL)/ {
- return 404;
- }
+ location /plugins/ {}
+ location /program/js/ {}
+ location /program/resources/ {}
+ location /skins/ {}
+ location / { internal; }
+ location ~ /\. { internal; }
}