summarylogtreecommitdiffstats
path: root/nginx-location.conf
blob: 6ab2e6bc73f1b6fd530d2a4d0896ea192a4431d6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
        ###
        ## In order to run this component you need to define a server-context in.
        ## /etc/nginx/nginx.conf:
        ##
        ##   http {
        ##      server {
        ##              listen 80;
        ##              include ${PATH_TO_THIS_LOCATION_FILE};
        ##      }
        ##   }
        ##
        ## Or include this file in your existing server-context.
        ##
        location /zarafa-webaccess {
	    root /usr/share/webapps;
	    index index.php;

            gzip_static       on;
            gzip_vary         on;

	    ## [WARNING] The following header states that the browser should only communicate
	    ## with your server over a secure connection for the next 24 months.
    	    add_header Strict-Transport-Security max-age=63072000;
    	    add_header X-Frame-Options SAMEORIGIN;
    	    add_header X-Content-Type-Options nosniff;

    	    # HIDDEN FILES AND FOLDERS
    	    rewrite ^(.*)\/\.(.*)$ @404 break;

            ## Increase this if you want to upload large attachments
	    client_max_body_size 20m;

	    # Pass PHP scripts to PHP-FPM
    	    location ~* \.php$ {
    	        if (!-f $request_filename) {
	            return 404;
                }

        	fastcgi_index   index.php;
        	fastcgi_pass    unix:/run/php-fpm/zarafa-webaccess.sock;
        	include         fastcgi_params;
    		fastcgi_param   SCRIPT_FILENAME    $document_root$fastcgi_script_name;
        	fastcgi_param   SCRIPT_NAME        $fastcgi_script_name;
    	    }
	}