docker-simplesamlphp/nginx.conf.template at main · smeetsee/docker-simplesamlphp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
user  nginx;
worker_processes  auto;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;
    server {
        listen 8080 default;
        server_name ${SERVER_NAME};

        index index.php;

        # See https://hstspreload.org/ before uncommenting the line below.
        # add_header Strict-Transport-Security "max-age=15768000; preload;";
        add_header X-Content-Type-Options nosniff;
        add_header X-XSS-Protection "1; mode=block";
        add_header X-Robots-Tag none;
        add_header X-Frame-Options DENY;

        location = / {
            return 301 https://$server_name/module.php/openidProvider/user.php;
        }

        location ^~ {
            alias /var/www/html/public;

            location ~ \.php(/|$) {
                fastcgi_pass     phpfpm:9000;
                fastcgi_index    index.php;
                fastcgi_param    SCRIPT_FILENAME  $request_filename;
                fastcgi_split_path_info ^(.+?\.php)(/.*)$;
                fastcgi_param    PATH_INFO $fastcgi_path_info;
                fastcgi_param    HTTPS on;
                fastcgi_param    HTTP_X_FORWARDED_PROTO https;
                include          fastcgi_params;
            }
        }
    }
}