| Path : /etc/nginx/sites-enabled/ |
|
B-Con CMD Config cPanel C-Rdp D-Log Info Jump Mass Ransom Symlink vHost Zone-H |
| Current File : //etc/nginx/sites-enabled/siteofibulutta.conf |
server {
root /var/www/html/site.ofisbulutta.com/wordpress/;
index index.php index.html index.htm;
client_max_body_size 256M;
server_name site.ofisbulutta.com;
# return 301 https://$host$request_uri;
rewrite ^.*sitemap.xml /site.xml permanent;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
#add_header Content-Security-Policy "default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com ofisbulutta.com fonts.googleapis.com fonts.gstatic.com;";
#add_header Content-Security-Policy "default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com ofisbulutta.com fonts.googleapis";
#add_header Content-Security-Policy "default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com ofisbulutta.com fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' site.ofisbulutta.com;";
add_header Content-Security-Policy "default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com ofisbulutta.com fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' site.ofisbulutta.com; worker-src 'self';";
add_header Permissions-Policy " camera=(), microphone=(), fullscreen=(self)";
add_header X-XSS-Protection "1; mode=block";
add_header Referrer-Policy "same-origin";
#add_header Referrer-Policy "origin";
location = /favicon.ico {
log_not_found off;
access_log off;
}
#if ($request_filename ~* \.(xml)$) {
# return 301 https://www.ofisbulutta.com/site.xmp;
# }
location /wiki {
autoindex on;
}
if ($http_user_agent ~* LWP::Simple|wget|libwww-perl) {
return 403;
}
location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc)$ {
expires 365d;
add_header Cache-Control "public";
}
location /piwik {
autoindex on;
}
location ~* \.(?:css|js)$ {
expires 1y;
access_log off;
add_header Cache-Control "public";
}
location ~ ^/(wp-admin|wp-login\.php) {
allow 95.85.41.56;
allow 176.234.94.236;
allow 193.192.120.82;
allow 46.20.11.230;
allow 85.107.72.134;
allow 78.161.163.25;
allow 92.44.146.103;
allow 85.107.68.52;
allow 78.183.218.142;
allow 92.45.199.50;
allow 213.142.143.232;
allow 95.70.137.35;
deny all;
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $request_filename;
include fastcgi_params;
}
}
location / {
# Block user enumeration
if ( $query_string ~ "author=([0-9]*)" ) { return 403; }
try_files $uri $uri/ /index.php?q=$uri&$args;
}
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $request_filename;
include fastcgi_params;
}
gzip on;
gzip_disable "msie6";
gzip_comp_level 9;
gzip_min_length 1100;
gzip_buffers 16 8k;
gzip_proxied any;
gzip_types
text/plain
text/css
text/js
text/xml
text/javascript
application/javascript
application/x-javascript
application/json
application/xml
application/xml+rss;
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/site.ofisbulutta.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/site.ofisbulutta.com/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = site.ofisbulutta.com) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name site.ofisbulutta.com;
listen 80;
return 404; # managed by Certbot
}