admin/B24-docker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

init

Browse Source
This commit is contained in:
admin
2026-05-20 15:23:05 +03:00
commit 43c0739dfa
703 changed files with 61692 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
confs/nginx/blank/index.html
+10
View File
@@ -0,0 +1,10 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
<title>200 OK</title>
</head>
<body>
<div>Ping!</div>
</body>
</html>
confs/nginx/certs/example.com/ca-chain.pem
+74
View File
@@ -0,0 +1,74 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
confs/nginx/certs/example.com/cert.pem
+44
View File
@@ -0,0 +1,44 @@
-----BEGIN CERTIFICATE-----
MIIHujCCBaKgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwgbYxCzAJBgNVBAYTAlJV
MRswGQYDVQQIDBJLYWxpbmluZ3JhZCBSZWdpb24xIDAeBgNVBAoMF0V4YW1wbGUg
Q29ycG9yYXRpb24gTHRkMTYwNAYDVQQLDC1FeGFtcGxlIENvcnBvcmF0aW9uIEx0
ZCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxMDAuBgNVBAMMJ0V4YW1wbGUgQ29ycG9y
YXRpb24gTHRkIEludGVybWVkaWF0ZSBDQTAeFw0yMTA5MjQyMjEwMjFaFw0zMTA5
MjIyMjEwMjFaMIHNMQswCQYDVQQGEwJSVTEbMBkGA1UECAwSS2FsaW5pbmdyYWQg
UmVnaW9uMRQwEgYDVQQHDAtLYWxpbmluZ3JhZDEgMB4GA1UECgwXRXhhbXBsZSBD
b3Jwb3JhdGlvbiBMdGQxMDAuBgNVBAsMJ0V4YW1wbGUgQ29ycG9yYXRpb24gTHRk
IFFBIFdlYiBTZXJ2aWNlczEWMBQGA1UEAwwNKi5leGFtcGxlLmNvbTEfMB0GCSqG
SIb3DQEJARYQaW5mb0BleGFtcGxlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBALuhbo3Xt4ot38eGjAJpdLZfALyCqH1iqWNXuVpnaUL8JNzv+pQH
BIf9IJpe7VzLgTQTBE+WtvSgIJmaLdlUOnlLSxO4c1l+nyTBa8ckQXHtuYEAggJ2
MqdYTs0R6O//ee+abDPYGgwa/SDR6J9ocPe2y/Ya1QIJcAgliKwHFGibNaANzDFU
r3WlukgXJU3bqHgxi/77DQWgCkUWGfnlQ1xFqDrH2Oila7CobAnim9RZmHBVDgb+
btIXikJks9yHSzh1Ev1EVsSFSF48tFQE7ZydNI6z6KedkpHJU2CzWEJXBzsJck3o
0DxpE/AjQzctBYSVloo1uIBkJSHlkpi0g84h6DHAuYtUODaXQN/3OR1oLYCEgsUk
1DoCM9LxR7C90ocU0cyl0DXWm3R3+zLRm+nvutrZINaUeBYXVVTNsUOO1KIYxb6a
5iVSLgP62BelEqwiqaxPkijCGmFMeOa41DqsvASGdZhbjlbzQOegwLShl/t1BRY0
/fpYgFhFe+YdnCn6JtFnKDYJlgxg+kekK5EQp1uHDLcIPBJyRQ1qzA6iJWrzL5Jk
3HzRznQE6LwW8JQR81KJskDvmZGHpgM40byOs2iLAe1udlwgGsF3Mu2qI/2dTe5k
C4k8eWsjbq166OoRIc1SDorD8emCobwrSeE0++JcChM0tJIPHYg0x4WzAgMBAAGj
ggG3MIIBszAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIGQDAzBglghkgBhvhC
AQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUgZm9yIFFBMB0GA1Ud
DgQWBBSuM/p3euZL9tN/yakfM64+AFSdWDCB8gYDVR0jBIHqMIHngBSQxJ5QdPZs
zi46nfFlikou/tauw6GByqSBxzCBxDELMAkGA1UEBhMCUlUxGzAZBgNVBAgMEkth
bGluaW5ncmFkIFJlZ2lvbjEUMBIGA1UEBwwLS2FsaW5pbmdyYWQxIDAeBgNVBAoM
F0V4YW1wbGUgQ29ycG9yYXRpb24gTHRkMTYwNAYDVQQLDC1FeGFtcGxlIENvcnBv
cmF0aW9uIEx0ZCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxKDAmBgNVBAMMH0V4YW1w
bGUgQ29ycG9yYXRpb24gTHRkIFJvb3QgQ0GCAhAAMA4GA1UdDwEB/wQEAwIF4DAT
BgNVHSUEDDAKBggrBgEFBQcDATAlBgNVHREEHjAcggtleGFtcGxlLmNvbYINKi5l
eGFtcGxlLmNvbTANBgkqhkiG9w0BAQsFAAOCAgEAYUq5j+SX6oL8CIEzUmyUv5Ud
fBQwMvNcPF8bAyFGip7KnjJIOyvBdgfAhiXyiDobphcAOzWgY2eAaoWzSBjW+JnB
dDB4cROeG0MJwYq3ScTCsyfkxe6uVvyjy6mLw380eo2A0phW/UqSxOOTnL1uMo6K
StzuQa0AOLkZmPekWtP/WKWmwG1HnBlrDEOTHXPhxVQWLylfCxJXJpRgh2PQwCwI
mOTX/wfWnutqWyLyWsyy37vQ8IEAUaBY7NbHQgTE93Qrfhyb1/d0FdDT8xF/XgQo
1JU/xfEeDZJMbwLUITv7Yl5zFwSXcDhjgA0d27hxJHPGEp9S/xIpyQ/FVzkimt+W
QU4I34SkITLYpble3I9PBK0QqBWQw7SRVwIWLinrGc1bb16rPlfijLutXI56JVjC
qaUV7HiTS5uL4F4Agdr1Ax+LynE1V+FRTsQSvdEe2BPFVIv9IMxMlMniYJdTeTf+
Z4iGHLHotutklp6my57cirM08g+gKQQBJFlcs66QZj9SZ2vTMvB7QLQ3iYX0jo/6
Hj7c2wfy+1CQ3AbbrAPSgDlconz7SCH2VON5lydY6ltPB6GnwMYK/dQq0WqpKjvR
0QG2HUbysUvtDmQAaqleVQoDz8BC5+p301gL2OhbS8eEfubjQTidYgvcu2H0NkkX
oQkUKWwNA2HY4IiO2e4=
-----END CERTIFICATE-----
confs/nginx/certs/example.com/chain.pem
+81
View File
@@ -0,0 +1,81 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIGXjCCBEagAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwgcQxCzAJBgNVBAYTAlJV
MRswGQYDVQQIDBJLYWxpbmluZ3JhZCBSZWdpb24xFDASBgNVBAcMC0thbGluaW5n
cmFkMSAwHgYDVQQKDBdFeGFtcGxlIENvcnBvcmF0aW9uIEx0ZDE2MDQGA1UECwwt
RXhhbXBsZSBDb3Jwb3JhdGlvbiBMdGQgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MSgw
JgYDVQQDDB9FeGFtcGxlIENvcnBvcmF0aW9uIEx0ZCBSb290IENBMB4XDTIxMDky
NDIyMDEzN1oXDTMzMDkyMTIyMDEzN1owgbYxCzAJBgNVBAYTAlJVMRswGQYDVQQI
DBJLYWxpbmluZ3JhZCBSZWdpb24xIDAeBgNVBAoMF0V4YW1wbGUgQ29ycG9yYXRp
b24gTHRkMTYwNAYDVQQLDC1FeGFtcGxlIENvcnBvcmF0aW9uIEx0ZCBDZXJ0aWZp
Y2F0ZSBBdXRob3JpdHkxMDAuBgNVBAMMJ0V4YW1wbGUgQ29ycG9yYXRpb24gTHRk
IEludGVybWVkaWF0ZSBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
AMHB34FLQKB1vrdXOViiK/jsoS9W9YWl5eFTelbIacFoh5JmDAP+wR3/mjDvQVUN
24qavPuCnkGsXvh23vXzofulm2ItoL8vVMwwzdrSBpdXkQhFu9yryFN6DrRdDHFi
M0ck0+IBCce0qbm3jHz+HhrTfWxcxKYWW97IOS4lmRjMsUCGNa0aL9RmNkHkOGwz
D8d9VyJA0SMrE+oOZTWKXieOC+NPGT9K6Ei5/EX64pcq5Pgefma2qaSNWJDzk3FZ
32YfTX0OyHvJLD8FthWfXouxBaaxmgGoPaTGS4EFfmA27fxEZJFZb3WBr8RJLUxq
X9NUZt23XqLyr5sJN3UvCgJNsGx5fNXPqZDHxZhYLTL+C2nAZu2D3YOqMlhL/czl
PWtSInuGkeO5DrBw+JoIVyV6yylLao7q0aEpLPIYcpbDhLH0VWLpdVWnizyBTBvB
gkahU37JSFOJHRc/B7/6NkDgsK1MJuOYsPz1k9Vl5fvocCp1Y7F2wpICpWNS8FF3
emaXt129WLQ6647+YxOJc+L3YlBnbN2M8M/aDUk2ukha69sxvhMCYOqIrUhAey6K
eUJT4ANzJCZyrLNp1eYCbr4jEeK+7cLxRxzSf4M/8bFNSqXJ8L4ODRLvFm2zagJT
bQgpJDKcR3UwqoHUl4Cfknw++p4w03Hx7191cXH+OS1HAgMBAAGjZjBkMB0GA1Ud
DgQWBBSQxJ5QdPZszi46nfFlikou/tauwzAfBgNVHSMEGDAWgBTYsCwyeYbRwATw
UuxxekErGqVHaTASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjAN
BgkqhkiG9w0BAQsFAAOCAgEAn+hzVAQgjSvS49O0RuhKt5wggVXaNmx6H+QFfvLm
VMiSr0ILjVfjjTw76Ogk+q5CKpne4PsQ5Aw6YKzM7jINCA5cLQ1OVN53HxJOjXzP
B1aSeEcIRbCBQOomMBzP1yzf6lBkpTK1tpYvGBosLjCQyYwu+Ty52bT+NEbAoqYd
J0LXzEJeW5xN9AN+bWJ1IVemjCgyAa6MmWlCiYveHcO7/DkfLmi8JZj60ynPjkNZ
8CWpdSOzLFwVRSy5YMLluTcdjIgCdgYrBwFxQ4+/QX9V+iRJ7QxRKNbSM5ZZE948
VvYWB3oZEPrRv4Rji5Geedy8xhXe9dAgPkeYY7Ra9i6MyisiLcSqScG+k0hMHmbF
5NhJiToUJaZcff1wfBUBKDoSmeCNdDzxtWODIa4ouh7T/7Jitk9Ps4OV8MBJC2zE
c0vKplgxKdCWA2luJHkFOrKWQgwN+ypdbbCZ0pcQS2pJ7w53QlVKf4Y4qlO+uJLs
pTMlem0rmV6Y8u0K+lGk0keGKz5stzLhk9LeKxiXqnh4pv0DvGUScfdOa75d9IYh
JZy7/KNgNYFdW/FgqXKzlbA1nv3NBl7dVYXQ3ICnRje1UHK0IlXcy3fY3ajKD+8o
+FtpOVp65U17XFS6yBbejSnfVsrrHi2HMHkLTot9SCn1E8LS//pFKW+992kENvVI
P5o=
-----END CERTIFICATE-----
confs/nginx/certs/example.com/dhparam.pem
+13
View File
@@ -0,0 +1,13 @@
-----BEGIN DH PARAMETERS-----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-----END DH PARAMETERS-----
confs/nginx/certs/example.com/fullchain.pem
+118
View File
@@ -0,0 +1,118 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIGXjCCBEagAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwgcQxCzAJBgNVBAYTAlJV
MRswGQYDVQQIDBJLYWxpbmluZ3JhZCBSZWdpb24xFDASBgNVBAcMC0thbGluaW5n
cmFkMSAwHgYDVQQKDBdFeGFtcGxlIENvcnBvcmF0aW9uIEx0ZDE2MDQGA1UECwwt
RXhhbXBsZSBDb3Jwb3JhdGlvbiBMdGQgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MSgw
JgYDVQQDDB9FeGFtcGxlIENvcnBvcmF0aW9uIEx0ZCBSb290IENBMB4XDTIxMDky
NDIyMDEzN1oXDTMzMDkyMTIyMDEzN1owgbYxCzAJBgNVBAYTAlJVMRswGQYDVQQI
DBJLYWxpbmluZ3JhZCBSZWdpb24xIDAeBgNVBAoMF0V4YW1wbGUgQ29ycG9yYXRp
b24gTHRkMTYwNAYDVQQLDC1FeGFtcGxlIENvcnBvcmF0aW9uIEx0ZCBDZXJ0aWZp
Y2F0ZSBBdXRob3JpdHkxMDAuBgNVBAMMJ0V4YW1wbGUgQ29ycG9yYXRpb24gTHRk
IEludGVybWVkaWF0ZSBDQTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
AMHB34FLQKB1vrdXOViiK/jsoS9W9YWl5eFTelbIacFoh5JmDAP+wR3/mjDvQVUN
24qavPuCnkGsXvh23vXzofulm2ItoL8vVMwwzdrSBpdXkQhFu9yryFN6DrRdDHFi
M0ck0+IBCce0qbm3jHz+HhrTfWxcxKYWW97IOS4lmRjMsUCGNa0aL9RmNkHkOGwz
D8d9VyJA0SMrE+oOZTWKXieOC+NPGT9K6Ei5/EX64pcq5Pgefma2qaSNWJDzk3FZ
32YfTX0OyHvJLD8FthWfXouxBaaxmgGoPaTGS4EFfmA27fxEZJFZb3WBr8RJLUxq
X9NUZt23XqLyr5sJN3UvCgJNsGx5fNXPqZDHxZhYLTL+C2nAZu2D3YOqMlhL/czl
PWtSInuGkeO5DrBw+JoIVyV6yylLao7q0aEpLPIYcpbDhLH0VWLpdVWnizyBTBvB
gkahU37JSFOJHRc/B7/6NkDgsK1MJuOYsPz1k9Vl5fvocCp1Y7F2wpICpWNS8FF3
emaXt129WLQ6647+YxOJc+L3YlBnbN2M8M/aDUk2ukha69sxvhMCYOqIrUhAey6K
eUJT4ANzJCZyrLNp1eYCbr4jEeK+7cLxRxzSf4M/8bFNSqXJ8L4ODRLvFm2zagJT
bQgpJDKcR3UwqoHUl4Cfknw++p4w03Hx7191cXH+OS1HAgMBAAGjZjBkMB0GA1Ud
DgQWBBSQxJ5QdPZszi46nfFlikou/tauwzAfBgNVHSMEGDAWgBTYsCwyeYbRwATw
UuxxekErGqVHaTASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBhjAN
BgkqhkiG9w0BAQsFAAOCAgEAn+hzVAQgjSvS49O0RuhKt5wggVXaNmx6H+QFfvLm
VMiSr0ILjVfjjTw76Ogk+q5CKpne4PsQ5Aw6YKzM7jINCA5cLQ1OVN53HxJOjXzP
B1aSeEcIRbCBQOomMBzP1yzf6lBkpTK1tpYvGBosLjCQyYwu+Ty52bT+NEbAoqYd
J0LXzEJeW5xN9AN+bWJ1IVemjCgyAa6MmWlCiYveHcO7/DkfLmi8JZj60ynPjkNZ
8CWpdSOzLFwVRSy5YMLluTcdjIgCdgYrBwFxQ4+/QX9V+iRJ7QxRKNbSM5ZZE948
VvYWB3oZEPrRv4Rji5Geedy8xhXe9dAgPkeYY7Ra9i6MyisiLcSqScG+k0hMHmbF
5NhJiToUJaZcff1wfBUBKDoSmeCNdDzxtWODIa4ouh7T/7Jitk9Ps4OV8MBJC2zE
c0vKplgxKdCWA2luJHkFOrKWQgwN+ypdbbCZ0pcQS2pJ7w53QlVKf4Y4qlO+uJLs
pTMlem0rmV6Y8u0K+lGk0keGKz5stzLhk9LeKxiXqnh4pv0DvGUScfdOa75d9IYh
JZy7/KNgNYFdW/FgqXKzlbA1nv3NBl7dVYXQ3ICnRje1UHK0IlXcy3fY3ajKD+8o
+FtpOVp65U17XFS6yBbejSnfVsrrHi2HMHkLTot9SCn1E8LS//pFKW+992kENvVI
P5o=
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
confs/nginx/certs/example.com/intermediateCA.pem
+37
View File
@@ -0,0 +1,37 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
confs/nginx/certs/example.com/privkey.pem
+51
View File
@@ -0,0 +1,51 @@
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
confs/nginx/certs/example.com/rootCA.pem
+37
View File
@@ -0,0 +1,37 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
confs/nginx/conf.d/default.conf
+231
View File
@@ -0,0 +1,231 @@
#
# HTTP
#
server {
listen 80;
listen [::]:80;
server_name b24pal.local;
real_ip_header X-Real-IP;
###set_real_ip_from %REAL_IP_FROM%;
#charset utf-8;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
index index.php;
root /opt/www;
error_page 404 @bitrix;
error_page 405 =200 @php;
# redirect server error pages to the static page /500.html
error_page 500 502 503 504 /500.html;
location = /500.html {
root /opt/www;
}
# block
include /etc/nginx/inc/block.conf;
# static files
include /etc/nginx/inc/static.conf;
# bx temp
include /etc/nginx/inc/bx_temp.conf;
# composite
#include /etc/nginx/inc/composite.conf;
# push and pull
include /etc/nginx/inc/push.conf;
# clouds storage
include /etc/nginx/inc/clouds.conf;
# proxying
include /etc/nginx/inc/proxy.conf;
# php files processing
location ~ \.php$ {
include fastcgi_params;
fastcgi_split_path_info ^(.+\.php)(.*)$;
fastcgi_pass php:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
# for CalDAV/CardDAV/GroupDAV server
include /etc/nginx/inc/dav.conf;
# directories page processing
location / {
index index.php;
try_files $uri $uri/ @bitrix;
}
# php processing
location @php {
include fastcgi_params;
fastcgi_split_path_info ^(.+\.php)(.*)$;
fastcgi_pass php:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
# bitrix rewrite
location @bitrix {
include fastcgi_params;
fastcgi_pass php:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root/bitrix/urlrewrite.php;
#fastcgi_param SCRIPT_FILENAME $document_root/bitrix/routing_index.php;
}
}
#
# HTTPS
#
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name _;
include /etc/nginx/ssl/ssl.conf;
real_ip_header X-Real-IP;
###set_real_ip_from %REAL_IP_FROM%;
#charset utf-8;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
index index.php;
root /opt/www;
error_page 404 @bitrix;
error_page 405 =200 @php;
# redirect server error pages to the static page /500.html
error_page 500 502 503 504 /500.html;
location = /500.html {
root /opt/www;
}
# block
include /etc/nginx/inc/block.conf;
# static files
include /etc/nginx/inc/static.conf;
# bx temp
include /etc/nginx/inc/bx_temp.conf;
# composite
#include /etc/nginx/inc/composite.conf;
# push and pull secure
include /etc/nginx/inc/push_secure.conf;
# clouds storage
include /etc/nginx/inc/clouds.conf;
# proxying
include /etc/nginx/inc/proxy.conf;
# php files processing
location ~ \.php$ {
include fastcgi_params;
fastcgi_split_path_info ^(.+\.php)(.*)$;
fastcgi_pass php:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
# for CalDAV/CardDAV/GroupDAV server
include /etc/nginx/inc/dav.conf;
# directories page processing
location / {
index index.php;
try_files $uri $uri/ @bitrix;
}
# php processing
location @php {
include fastcgi_params;
fastcgi_split_path_info ^(.+\.php)(.*)$;
fastcgi_pass php:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
# bitrix rewrite
location @bitrix {
include fastcgi_params;
fastcgi_pass php:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root/bitrix/urlrewrite.php;
#fastcgi_param SCRIPT_FILENAME $document_root/bitrix/routing_index.php;
}
}
#
# HTTP MOBILE
#
server {
listen 8893;
listen [::]:8893;
server_name _;
real_ip_header X-Real-IP;
###set_real_ip_from %REAL_IP_FROM%;
#charset utf-8;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
# errors pages
include /etc/nginx/inc/errors.conf;
# block
include /etc/nginx/inc/block.conf;
# push and pull
include /etc/nginx/inc/push.conf;
location / {
index index.html;
root /etc/nginx/blank;
}
}
#
# HTTPS MOBILE
#
server {
listen 8894 ssl;
listen [::]:8894 ssl;
server_name _;
include /etc/nginx/ssl/ssl.conf;
real_ip_header X-Real-IP;
###set_real_ip_from %REAL_IP_FROM%;
#charset utf-8;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
# errors pages
include /etc/nginx/inc/errors.conf;
# block
include /etc/nginx/inc/block.conf;
# push and pull secure
include /etc/nginx/inc/push_secure.conf;
location / {
index index.html;
root /etc/nginx/blank;
}
}
#
confs/nginx/errors/403.html
+24
View File
@@ -0,0 +1,24 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
<style>
.error {color:#000; height:200px; margin:-100px 0 0 -340px; font-family:Arial, sans-serif; text-align:center; position:absolute; top:50%; text-align:center; left:50%; width:680px;}
.error-fon {font-size:240px; font-weight:bold; line-height:240px; color:#f5f5f5; position:absolute; top:-16px; left:50%; margin-left:-200px; z-index:-1;}
.error-text-top {font-size:40px; margin-top:50px;}
.error-test-separate {border-top:1px solid #f2f2f2; margin-top:10px;}
.error-text-bottom {font-size:20px; margin-top:16px;}
</style>
<title>403 Forbidden</title>
</head>
<body>
<div class="error">
<div class="error-fon">403</div>
<div class="error-text-wrap">
<div class="error-text-top">403 Forbidden</div>
<div class="error-test-separate"></div>
<div class="error-text-bottom">Bitrix Env</div>
</div>
</div>
</body>
</html>
confs/nginx/errors/404.html
+24
View File
@@ -0,0 +1,24 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
<style>
.error {color:#000; height:200px; margin:-100px 0 0 -340px; font-family:Arial, sans-serif; text-align:center; position:absolute; top:50%; text-align:center; left:50%; width:680px;}
.error-fon {font-size:240px; font-weight:bold; line-height:240px; color:#f5f5f5; position:absolute; top:-16px; left:50%; margin-left:-200px; z-index:-1;}
.error-text-top {font-size:40px; margin-top:50px;}
.error-test-separate {border-top:1px solid #f2f2f2; margin-top:10px;}
.error-text-bottom {font-size:20px; margin-top:16px;}
</style>
<title>404 Not Found</title>
</head>
<body>
<div class="error">
<div class="error-fon">404</div>
<div class="error-text-wrap">
<div class="error-text-top">404 Not Found</div>
<div class="error-test-separate"></div>
<div class="error-text-bottom">Bitrix Env</div>
</div>
</div>
</body>
</html>
confs/nginx/errors/500.html
+24
View File
@@ -0,0 +1,24 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
<style>
.error {color:#000; height:200px; margin:-100px 0 0 -340px; font-family:Arial, sans-serif; text-align:center; position:absolute; top:50%; text-align:center; left:50%; width:680px;}
.error-fon {font-size:240px; font-weight:bold; line-height:240px; color:#f5f5f5; position:absolute; top:-16px; left:50%; margin-left:-200px; z-index:-1;}
.error-text-top {font-size:40px; margin-top:50px;}
.error-test-separate {border-top:1px solid #f2f2f2; margin-top:10px;}
.error-text-bottom {font-size:20px; margin-top:16px;}
</style>
<title>500 System Error</title>
</head>
<body>
<div class="error">
<div class="error-fon">500</div>
<div class="error-text-wrap">
<div class="error-text-top">500 System Error</div>
<div class="error-test-separate"></div>
<div class="error-text-bottom">Bitrix Env</div>
</div>
</div>
</body>
</html>
confs/nginx/errors/502.html
+24
View File
@@ -0,0 +1,24 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
<style>
.error {color:#000; height:200px; margin:-100px 0 0 -340px; font-family:Arial, sans-serif; text-align:center; position:absolute; top:50%; text-align:center; left:50%; width:680px;}
.error-fon {font-size:240px; font-weight:bold; line-height:240px; color:#f5f5f5; position:absolute; top:-16px; left:50%; margin-left:-200px; z-index:-1;}
.error-text-top {font-size:40px; margin-top:50px;}
.error-test-separate {border-top:1px solid #f2f2f2; margin-top:10px;}
.error-text-bottom {font-size:20px; margin-top:16px;}
</style>
<title>502 Bad Gateway</title>
</head>
<body>
<div class="error">
<div class="error-fon">502</div>
<div class="error-text-wrap">
<div class="error-text-top">502 Bad Gateway</div>
<div class="error-test-separate"></div>
<div class="error-text-bottom">Bitrix Env</div>
</div>
</div>
</body>
</html>
confs/nginx/errors/503.html
+24
View File
@@ -0,0 +1,24 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
<style>
.error {color:#000; height:200px; margin:-100px 0 0 -340px; font-family:Arial, sans-serif; text-align:center; position:absolute; top:50%; text-align:center; left:50%; width:680px;}
.error-fon {font-size:240px; font-weight:bold; line-height:240px; color:#f5f5f5; position:absolute; top:-16px; left:50%; margin-left:-200px; z-index:-1;}
.error-text-top {font-size:40px; margin-top:50px;}
.error-test-separate {border-top:1px solid #f2f2f2; margin-top:10px;}
.error-text-bottom {font-size:20px; margin-top:16px;}
</style>
<title>503 Service Unavailable</title>
</head>
<body>
<div class="error">
<div class="error-fon">503</div>
<div class="error-text-wrap">
<div class="error-text-top">503 Service Unavailable</div>
<div class="error-test-separate"></div>
<div class="error-text-bottom">Bitrix Env</div>
</div>
</div>
</body>
</html>
confs/nginx/errors/504.html
+24
View File
@@ -0,0 +1,24 @@
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8">
<style>
.error {color:#000; height:200px; margin:-100px 0 0 -340px; font-family:Arial, sans-serif; text-align:center; position:absolute; top:50%; text-align:center; left:50%; width:680px;}
.error-fon {font-size:240px; font-weight:bold; line-height:240px; color:#f5f5f5; position:absolute; top:-16px; left:50%; margin-left:-200px; z-index:-1;}
.error-text-top {font-size:40px; margin-top:50px;}
.error-test-separate {border-top:1px solid #f2f2f2; margin-top:10px;}
.error-text-bottom {font-size:20px; margin-top:16px;}
</style>
<title>504 Gateway Timeout</title>
</head>
<body>
<div class="error">
<div class="error-fon">504</div>
<div class="error-text-wrap">
<div class="error-text-top">504 Gateway Timeout</div>
<div class="error-test-separate"></div>
<div class="error-text-bottom">Bitrix Env</div>
</div>
</div>
</body>
</html>
confs/nginx/fastcgi.conf
+25
View File
@@ -0,0 +1,25 @@
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param REQUEST_SCHEME $scheme;
fastcgi_param HTTPS $https if_not_empty;
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param REDIRECT_STATUS 200;
confs/nginx/fastcgi_params
+25
View File
@@ -0,0 +1,25 @@
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param REQUEST_SCHEME $scheme;
fastcgi_param HTTPS $https if_not_empty;
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param REDIRECT_STATUS 200;
confs/nginx/inc/block.conf
+79
View File
@@ -0,0 +1,79 @@
#
# .ht files: .htpasswd, .htaccess
#
location ~* /\.ht {
deny all;
}
#
# repositories: .svn, .hg, .git
#
location ~* /\.(svn|hg|git) {
deny all;
}
#
# ignore files: .hgignore, .gitignore
#
location ~* /\.(hgignore|gitignore) {
deny all;
}
#
# tmp files without filename: .orig, .bak, .save, .old, .swp
#
location ~* /(\.(orig|bak|save|old|swp)) {
deny all;
}
#
# tmp files with filename: index.orig, index.bak, index.save, index.old, index.swp, index~
#
location ~* /*(\.(orig|bak|save|old|swp)|~)$ {
deny all;
}
#
# macos and windows special files: .DS_Store, Thumbs.db
#
location ~* /(\.DS_Store|Thumbs.db) {
deny all;
}
#
#location ~* /vendor/ {
# deny all;
#}
#
location ~* /composer {
deny all;
}
#
# bitrix internal locations
#
location ~* ^/bitrix/(modules|local_cache|stack_cache|managed_cache|php_interface) {
deny all;
}
#
location ~* ^/bitrix/\.settings\.php {
deny all;
}
#
location ~* ^/bitrix/\.settings_extra\.php {
deny all;
}
#
# upload 1c files
#
location ~* ^/upload/1c_[^/]+/ {
deny all;
}
#
# use the file system to access files outside the site (cache)
#
location ~* /\.\./ {
deny all;
}
#
location ~* ^/bitrix/html_pages/\.config\.php {
deny all;
}
#
location ~* ^/bitrix/html_pages/\.enabled {
deny all;
}
#
confs/nginx/inc/bx_temp.conf
+11
View File
@@ -0,0 +1,11 @@
#
location ~* ^/bx_tmp_download/ {
internal;
rewrite /bx_tmp_download/(.+) /.bx_temp/$1 last;
}
#
location ~* ^/.bx_temp/ {
internal;
root /opt;
}
#
confs/nginx/inc/clouds.conf
+481
View File
@@ -0,0 +1,481 @@
#
# Use nginx to return static content from cloud storage
#
location ^~ /upload/bx_cloud_upload/ {
# Amazon Simple Storage Service
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.(s3|af-south-1|ap-east-1|ap-south-1|ap-south-2|ap-southeast-1|ap-southeast-2|ap-southeast-3|ap-southeast-4|ap-northeast-1|ap-northeast-2|ap-northeast-3|ca-central-1|ca-west-1|cn-north-1|cn-northwest-1|eu-central-1|eu-central-2|eu-west-1|eu-west-2|eu-west-3|eu-south-1|eu-south-2|eu-north-1|il-central-1|me-south-1|me-central-1|sa-east-1|us-east-1|us-east-2|us-west-1|us-west-2|us-gov-east-1|us-gov-west-1)\.amazonaws\.com/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.$3.amazonaws.com/$4;
}
# Google Storage
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.commondatastorage\.googleapis\.com/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.commondatastorage.googleapis.com/$3;
}
# Rackspace Cloud Files
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.([^/:\s]+)\.([^/:\s]+)\.rackcdn\.com/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.$3.$4.rackcdn.com/$5;
}
# Clodo.ru (old)
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.clodo\.ru\:(80|443)/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.clodo.ru:$3/$4;
}
# Clodo.ru
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.clodo\.ru/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.clodo.ru/$3;
}
# Selectel
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.selcdn\.ru/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.selcdn.ru/$3;
}
# Selectel as S3 compatible storage
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.selstorage\.ru/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.selstorage.ru/$3;
}
# HotBox
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.hb\.bizmrg\.com/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.hb.bizmrg.com/$3;
}
# HotBox
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.hb\.bizmrg\.com/([^\s].+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://hb.bizmrg.com/$2;
}
# Yandex Object Storage
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.storage\.yandexcloud\.net/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.storage.yandexcloud.net/$3;
}
# Yandex Object Storage
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.storage\.yandexcloud\.net/([^\s].+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://storage.yandexcloud.net/$2;
}
# S3 compatible storage
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.io\.activecloud\.com/([^\s]+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://$2.io.activecloud.com/$3;
}
# S3 compatible storage
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.io\.activecloud\.com/([^\s].+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://io.activecloud.com/$2;
}
# Timeweb.cloud S3 compatible storage
location ~ ^/upload/bx_cloud_upload/(http[s]?)\.s3\.timeweb\.cloud/([^\s].+)$ {
internal;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
#proxy_max_temp_file_size 0;
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $1://s3.timeweb.cloud/$2;
}
# block everything else
location ~* .*$ {
deny all;
}
}
#
# cloud resize cache
#
location ^~ /upload/resize_cache/c/upload/bx_cloud_upload/ {
# Amazon
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.(s3|af-south-1|ap-east-1|ap-south-1|ap-south-2|ap-southeast-1|ap-southeast-2|ap-southeast-3|ap-southeast-4|ap-northeast-1|ap-northeast-2|ap-northeast-3|ca-central-1|ca-west-1|cn-north-1|cn-northwest-1|eu-central-1|eu-central-2|eu-west-1|eu-west-2|eu-west-3|eu-south-1|eu-south-2|eu-north-1|il-central-1|me-south-1|me-central-1|sa-east-1|us-east-1|us-east-2|us-west-1|us-west-2|us-gov-east-1|us-gov-west-1)\.amazonaws\.com/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.$3.amazonaws.com/$4;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Rackspace
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.([^/:\s]+)\.([^/:\s]+)\.rackcdn\.com/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.$3.$4.rackcdn.com/$5;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Clodo
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.clodo\.ru\:(80|443)/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.clodo.ru:$3/$4;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Google
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.commondatastorage\.googleapis\.com/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.commondatastorage.googleapis.com/$3;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Selectel
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.selcdn\.ru/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.selcdn.ru/$3;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Selectel as S3 compatible storage
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.selstorage\.ru/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.selstorage.ru/$3;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Yandex
location ~* ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.storage\.yandexcloud\.net/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.storage.yandexcloud.net/$3;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Yandex second option
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.storage\.yandexcloud\.net/([^\s].+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://storage.yandexcloud.net/$2;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# HotBox
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.hb\.bizmrg\.com/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.hb.bizmrg.com/$3;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# HotBox
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.hb\.bizmrg\.com/([^\s].+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://hb.bizmrg.com/$2;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Clodo.ru
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.([^/:\s]+)\.clodo\.ru/([^\s]+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://$2.clodo.ru/$3;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# Timeweb.cloud S3 compatible storage
location ~ ^/upload/resize_cache/c/upload/bx_cloud_upload/(http[s]?)\.s3\.timeweb\.cloud/([^\s].+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
resolver 8.8.8.8 ipv6=off;
proxy_method GET;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
if ($cdi) {
more_set_headers -s 200 'Content-Disposition: $cdi';
}
proxy_pass $1://s3.timeweb.cloud/$2;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
# block everything else
location ~* .*$ {
deny all;
}
}
#
confs/nginx/inc/composite.conf
+8
View File
@@ -0,0 +1,8 @@
#
location ~* @.*\.html$ {
internal;
# disable browser cache, php manage file
expires -1y;
add_header X-Bitrix-Composite "Nginx (file)";
}
#
confs/nginx/inc/dav.conf
+17
View File
@@ -0,0 +1,17 @@
#
location ~ ^/bitrix/groupdav.php.*$ {
if ($request_method ~ ^(PROPPATCH|MKCALENDAR)$) {
add_header Allow "OPTIONS,REPORT,CHECKAUTH,PROPFIND,MKCOL,GET,POST,PUT,DELETE,COPY,MOVE,LOCK,UNLOCK,ACL,HEAD";
return 405 "Method not allowed";
}
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root/bitrix/groupdav.php;
fastcgi_split_path_info ^(.+\.php)(.*)$;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_pass php:9000;
}
#
location ~ ^/.well-known/(caldav|carddav)$ {
rewrite ^ /bitrix/groupdav.php last;
}
#
confs/nginx/inc/errors.conf
+27
View File
@@ -0,0 +1,27 @@
# errors pages
error_page 403 /403.html;
error_page 404 /404.html;
error_page 500 /500.html;
error_page 502 /502.html;
error_page 503 /503.html;
error_page 504 /504.html;
# errors pages locations
location ^~ /403.html {
root /etc/nginx/errors;
}
location ^~ /404.html {
root /etc/nginx/errors;
}
location ^~ /500.html {
root /etc/nginx/errors;
}
location ^~ /502.html {
root /etc/nginx/errors;
}
location ^~ /503.html {
root /etc/nginx/errors;
}
location ^~ /504.html {
root /etc/nginx/errors;
}
confs/nginx/inc/modules.conf
+165
View File
@@ -0,0 +1,165 @@
#
##########################################################
#
# nginx modules - uncomment line and restart nginx
#
##########################################################
#
#
# nginx-module-brotli = brotli compression dynamic module
#
load_module "/usr/lib/nginx/modules/ngx_http_brotli_filter_module.so";
load_module "/usr/lib/nginx/modules/ngx_http_brotli_static_module.so";
#
#
# nginx-module-headers-more = headers-more dynamic module
#
load_module "/usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so";
#
#
# nginx-module-zip = zip on fly dynamic module
#
load_module "/usr/lib/nginx/modules/ngx_http_zip_module.so";
#
#
# nginx-module-njs = njs dynamic module
#
#load_module "/usr/lib/nginx/modules/ngx_http_js_module.so";
#load_module "/usr/lib/nginx/modules/ngx_stream_js_module.so";
#
#
# nginx-module-geoip = geoip dynamic module
#
#load_module "/usr/lib/nginx/modules/ngx_http_geoip_module.so";
#load_module "/usr/lib/nginx/modules/ngx_stream_geoip_module.so";
#
#
# nginx-module-geoip2 = geoip2 dynamic module
#
#load_module "/usr/lib/nginx/modules/ngx_http_geoip2_module.so";
#load_module "/usr/lib/nginx/modules/ngx_stream_geoip2_module.so";
#
#
# nginx-module-image-filter = image filter dynamic module
#
#load_module "/usr/lib/nginx/modules/ngx_http_image_filter_module.so";
#
#
# nginx-module-xslt = xslt dynamic module
#
#load_module "/usr/lib/nginx/modules/ngx_http_xslt_filter_module.so";
#
#
# nginx-module-perl = perl dynamic module
#
#load_module "/usr/lib/nginx/modules/ngx_http_perl_module.so";
#
#
# nginx-module-ndk = ndk dynamic module
#
#load_module "/usr/lib/nginx/modules/ndk_http_module.so";
#
#
# nginx-module-lua = lua dynamic module
# ndk_http_module must be placed first!
#
#load_module "/usr/lib/nginx/modules/ndk_http_module.so";
#load_module "/usr/lib/nginx/modules/ngx_http_lua_module.so";
#load_module "/usr/lib/nginx/modules/ngx_stream_lua_module.so";
#
#
##########################################################
#
# nginx-debug modules - uncomment line and restart nginx-debug
#
##########################################################
#
#
# nginx-module-brotli = brotli compression dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_brotli_filter_module-debug.so";
#load_module "/usr/lib/nginx/modules/ngx_http_brotli_static_module-debug.so";
#
#
# nginx-module-headers-more = headers-more dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_headers_more_filter_module-debug.so";
#
#
# nginx-module-zip = zip on fly dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_zip_module-debug.so";
#
#
# nginx-module-njs = njs dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_js_module-debug.so";
#load_module "/usr/lib/nginx/modules/ngx_stream_js_module-debug.so";
#
#
# nginx-module-geoip = geoip dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_geoip_module-debug.so";
#load_module "/usr/lib/nginx/modules/ngx_stream_geoip_module-debug.so";
#
#
# nginx-module-geoip2 = geoip2 dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_geoip2_module-debug.so";
#load_module "/usr/lib/nginx/modules/ngx_stream_geoip2_module-debug.so";
#
#
# nginx-module-image-filter = image filter dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_image_filter_module-debug.so";
#
#
# nginx-module-xslt = xslt dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_xslt_filter_module-debug.so";
#
#
# nginx-module-perl = perl dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ngx_http_perl_module-debug.so";
#
#
# nginx-module-ndk = ndk dynamic module (debug)
#
#load_module "/usr/lib/nginx/modules/ndk_http_module-debug.so";
#
#
# nginx-module-lua = lua dynamic module (debug)
# ndk_http_module must be placed first!
#
#load_module "/usr/lib/nginx/modules/ndk_http_module-debug.so";
#load_module "/usr/lib/nginx/modules/ngx_http_lua_module-debug.so";
#load_module "/usr/lib/nginx/modules/ngx_stream_lua_module-debug.so";
#
#
##########################################################
#
confs/nginx/inc/proxy.conf
+17
View File
@@ -0,0 +1,17 @@
#
# bitrixsetup script
#
location ^~ ^(/bitrixsetup\.php)$ {
proxy_buffering off;
}
#
# pub and online + telephony and voximplant
#
#location ~* ^/(pub/|online/|services/telephony/info_receiver.php|/bitrix/tools/voximplant/) {
# add_header X-Frame-Options '' always;
# #
# location ~* ^/(pub/imconnector/|pub/imbot.php|services/telephony/info_receiver.php|bitrix/tools/voximplant/) {
# proxy_ignore_client_abort on;
# }
#}
#
confs/nginx/inc/push.conf
+31
View File
@@ -0,0 +1,31 @@
#
location ~* ^/bitrix/subws/ {
proxy_pass http://push_sub:8010;
# http://blog.martinfjordvald.com/2013/02/websockets-in-nginx/
# 12h+0.5
proxy_max_temp_file_size 0;
proxy_read_timeout 43800;
proxy_http_version 1.1;
proxy_set_header Upgrade $replace_upgrade;
proxy_set_header Connection $connection_upgrade;
}
#
location ~* ^/bitrix/sub/ {
rewrite ^/bitrix/sub/(.*)$ /bitrix/subws/$1 break;
proxy_pass http://push_sub:8010;
proxy_max_temp_file_size 0;
proxy_read_timeout 43800;
}
#
location ~* ^/bitrix/rest/ {
proxy_pass http://push_pub:9010;
proxy_max_temp_file_size 0;
proxy_read_timeout 43800;
}
#
location ~* ^/bitrix/pub/ {
proxy_pass http://push_pub:9010;
proxy_max_temp_file_size 0;
proxy_read_timeout 43800;
}
#
confs/nginx/inc/push_secure.conf
+31
View File
@@ -0,0 +1,31 @@
#
location ~* ^/bitrix/subws/ {
proxy_pass http://push_sub:8010;
# http://blog.martinfjordvald.com/2013/02/websockets-in-nginx/
# 12h+0.5
proxy_max_temp_file_size 0;
proxy_read_timeout 43800;
proxy_http_version 1.1;
proxy_set_header Upgrade $replace_upgrade;
proxy_set_header Connection $connection_upgrade;
}
#
location ~* ^/bitrix/sub/ {
rewrite ^/bitrix/sub/(.*)$ /bitrix/subws/$1 break;
proxy_pass http://push_sub:8010;
proxy_max_temp_file_size 0;
proxy_read_timeout 43800;
}
#
location ~* ^/bitrix/rest/ {
proxy_pass http://push_pub:9010;
proxy_max_temp_file_size 0;
proxy_read_timeout 43800;
}
#
location ~* ^/bitrix/pub/ {
proxy_pass http://push_pub:9010;
proxy_max_temp_file_size 0;
proxy_read_timeout 43800;
}
#
confs/nginx/inc/static.conf
+92
View File
@@ -0,0 +1,92 @@
#
# static files
#
location ~* ^.+\.(jpg|jpeg|gif|png|svg|js|css|mp3|ogg|mpe?g|avi|zip|gz|bz2?|rar|html|htm|xml|jpg|jpeg|gif|png|css|flv|js|wmv|mp4|bmp|swf|ico|txt|otf|woff|woff2|ttf|eot|map|wav|tar|7z)$ {
log_not_found off;
access_log off;
expires 30d;
add_header Cache-Control public;
}
#
# internal sources
#
location ~ (/bitrix/modules|/upload/support/not_image|/bitrix/php_interface|local/modules|local/php_interface) {
internal;
}
#
# accept access for merged css and js
#
location ~* ^/bitrix/cache/(css/.+\.css|js/.+\.js)$ {
expires 30d;
}
#
# static content
#
location ~* ^/(upload|bitrix/images|bitrix/tmp) {
set $cdi $upstream_http_x_cd_info;
if ($cdi) {
more_set_headers -s 200 'Content-Disposition:$cdi';
}
expires 30d;
}
#
# fix xss on svg files in /upload/*
#
location ~* ^/upload/.+\.svg$ {
add_header Content-Security-Policy "default-src 'none'; style-src 'unsafe-inline'; sandbox";
}
#
# download file from /upload/*, do not execute
#
location ~* ^/upload/.*([^/]+)\.(html|htm|php|php3|php4|php5|php6|phtml|pl|asp|aspx|cgi|dll|exe|shtm|shtml|fcg|fcgi|fpl|asmx|pht)$ {
add_header Content-Disposition "attachment";
}
#
# upload sizes
#
location ~ /upload/ {
client_body_buffer_size 1024m;
client_max_body_size 1024m;
}
#
# local resize cache
#
location ~* ^/upload/resize_cache/x/(.+)$ {
internal;
set $new_uri $upstream_http_x_gen_src;
set $cdi $upstream_http_x_cd_info;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Server $host;
more_clear_input_headers 'Authorization';
if ($cdi) {
more_set_headers -s 200 'Content-Disposition:$cdi';
}
proxy_set_header "cookie" "";
proxy_set_header "content-type" "";
proxy_set_header "content-length" "";
proxy_pass $scheme://$host/upload/resize_cache/$1;
proxy_intercept_errors on;
error_page 403 404 500 502 503 504 = /$new_uri;
}
#
# favicon.png
#
location = /favicon.png {
log_not_found off;
access_log off;
}
#
# robots.txt
#
location = /robots.txt {
log_not_found off;
access_log off;
}
#
# player options, disable no-sniff
#
location ~* ^/bitrix/components/bitrix/player/mediaplayer/player$ {
add_header Access-Control-Allow-Origin *;
}
#
confs/nginx/koi-utf
+108
View File
@@ -0,0 +1,108 @@
# This map is not a full koi8-r <> utf8 map: it does not contain
# box-drawing and some other characters. Besides this map contains
# several koi8-u and Byelorussian letters which are not in koi8-r.
# If you need a full and standard map, use contrib/unicode2nginx/koi-utf
# map instead.
charset_map koi8-r utf-8 {
80 E282AC ; # euro
95 E280A2 ; # bullet
9A C2A0 ; # &nbsp;
9E C2B7 ; # &middot;
A3 D191 ; # small yo
A4 D194 ; # small Ukrainian ye
A6 D196 ; # small Ukrainian i
A7 D197 ; # small Ukrainian yi
AD D291 ; # small Ukrainian soft g
AE D19E ; # small Byelorussian short u
B0 C2B0 ; # &deg;
B3 D081 ; # capital YO
B4 D084 ; # capital Ukrainian YE
B6 D086 ; # capital Ukrainian I
B7 D087 ; # capital Ukrainian YI
B9 E28496 ; # numero sign
BD D290 ; # capital Ukrainian soft G
BE D18E ; # capital Byelorussian short U
BF C2A9 ; # (C)
C0 D18E ; # small yu
C1 D0B0 ; # small a
C2 D0B1 ; # small b
C3 D186 ; # small ts
C4 D0B4 ; # small d
C5 D0B5 ; # small ye
C6 D184 ; # small f
C7 D0B3 ; # small g
C8 D185 ; # small kh
C9 D0B8 ; # small i
CA D0B9 ; # small j
CB D0BA ; # small k
CC D0BB ; # small l
CD D0BC ; # small m
CE D0BD ; # small n
CF D0BE ; # small o
D0 D0BF ; # small p
D1 D18F ; # small ya
D2 D180 ; # small r
D3 D181 ; # small s
D4 D182 ; # small t
D5 D183 ; # small u
D6 D0B6 ; # small zh
D7 D0B2 ; # small v
D8 D18C ; # small soft sign
D9 D18B ; # small y
DA D0B7 ; # small z
DB D188 ; # small sh
DC D18D ; # small e
DD D189 ; # small shch
DE D187 ; # small ch
DF D18A ; # small hard sign
E0 D0AE ; # capital YU
E1 D090 ; # capital A
E2 D091 ; # capital B
E3 D0A6 ; # capital TS
E4 D094 ; # capital D
E5 D095 ; # capital YE
E6 D0A4 ; # capital F
E7 D093 ; # capital G
E8 D0A5 ; # capital KH
E9 D098 ; # capital I
EA D099 ; # capital J
EB D09A ; # capital K
EC D09B ; # capital L
ED D09C ; # capital M
EE D09D ; # capital N
EF D09E ; # capital O
F0 D09F ; # capital P
F1 D0AF ; # capital YA
F2 D0A0 ; # capital R
F3 D0A1 ; # capital S
F4 D0A2 ; # capital T
F5 D0A3 ; # capital U
F6 D096 ; # capital ZH
F7 D092 ; # capital V
F8 D0AC ; # capital soft sign
F9 D0AB ; # capital Y
FA D097 ; # capital Z
FB D0A8 ; # capital SH
FC D0AD ; # capital E
FD D0A9 ; # capital SHCH
FE D0A7 ; # capital CH
FF D0AA ; # capital hard sign
}
confs/nginx/koi-win
+102
View File
@@ -0,0 +1,102 @@
charset_map koi8-r windows-1251 {
80 88 ; # euro
95 95 ; # bullet
9A A0 ; # &nbsp;
9E B7 ; # &middot;
A3 B8 ; # small yo
A4 BA ; # small Ukrainian ye
A6 B3 ; # small Ukrainian i
A7 BF ; # small Ukrainian yi
AD B4 ; # small Ukrainian soft g
AE A2 ; # small Byelorussian short u
B0 B0 ; # &deg;
B3 A8 ; # capital YO
B4 AA ; # capital Ukrainian YE
B6 B2 ; # capital Ukrainian I
B7 AF ; # capital Ukrainian YI
B9 B9 ; # numero sign
BD A5 ; # capital Ukrainian soft G
BE A1 ; # capital Byelorussian short U
BF A9 ; # (C)
C0 FE ; # small yu
C1 E0 ; # small a
C2 E1 ; # small b
C3 F6 ; # small ts
C4 E4 ; # small d
C5 E5 ; # small ye
C6 F4 ; # small f
C7 E3 ; # small g
C8 F5 ; # small kh
C9 E8 ; # small i
CA E9 ; # small j
CB EA ; # small k
CC EB ; # small l
CD EC ; # small m
CE ED ; # small n
CF EE ; # small o
D0 EF ; # small p
D1 FF ; # small ya
D2 F0 ; # small r
D3 F1 ; # small s
D4 F2 ; # small t
D5 F3 ; # small u
D6 E6 ; # small zh
D7 E2 ; # small v
D8 FC ; # small soft sign
D9 FB ; # small y
DA E7 ; # small z
DB F8 ; # small sh
DC FD ; # small e
DD F9 ; # small shch
DE F7 ; # small ch
DF FA ; # small hard sign
E0 DE ; # capital YU
E1 C0 ; # capital A
E2 C1 ; # capital B
E3 D6 ; # capital TS
E4 C4 ; # capital D
E5 C5 ; # capital YE
E6 D4 ; # capital F
E7 C3 ; # capital G
E8 D5 ; # capital KH
E9 C8 ; # capital I
EA C9 ; # capital J
EB CA ; # capital K
EC CB ; # capital L
ED CC ; # capital M
EE CD ; # capital N
EF CE ; # capital O
F0 CF ; # capital P
F1 DF ; # capital YA
F2 D0 ; # capital R
F3 D1 ; # capital S
F4 D2 ; # capital T
F5 D3 ; # capital U
F6 C6 ; # capital ZH
F7 C2 ; # capital V
F8 DC ; # capital soft sign
F9 DB ; # capital Y
FA C7 ; # capital Z
FB D8 ; # capital SH
FC DD ; # capital E
FD D9 ; # capital SHCH
FE D7 ; # capital CH
FF DA ; # capital hard sign
}
confs/nginx/maps/im_settings.conf
+11
View File
@@ -0,0 +1,11 @@
#
map $http_upgrade $connection_upgrade {
default upgrade;
'' 'close';
}
#
map $http_upgrade $replace_upgrade {
default $http_upgrade;
'' 'websocket';
}
#
confs/nginx/mime.types
+99
View File
@@ -0,0 +1,99 @@
types {
text/html html htm shtml;
text/css css;
text/xml xml;
image/gif gif;
image/jpeg jpeg jpg;
application/javascript js;
application/atom+xml atom;
application/rss+xml rss;
text/mathml mml;
text/plain txt;
text/vnd.sun.j2me.app-descriptor jad;
text/vnd.wap.wml wml;
text/x-component htc;
image/png png;
image/svg+xml svg svgz;
image/tiff tif tiff;
image/vnd.wap.wbmp wbmp;
image/webp webp;
image/x-icon ico;
image/x-jng jng;
image/x-ms-bmp bmp;
font/woff woff;
font/woff2 woff2;
application/x-font-ttf ttf;
application/x-font-opentype otf;
application/java-archive jar war ear;
application/json json;
application/mac-binhex40 hqx;
application/msword doc;
application/pdf pdf;
application/postscript ps eps ai;
application/rtf rtf;
application/vnd.apple.mpegurl m3u8;
application/vnd.google-earth.kml+xml kml;
application/vnd.google-earth.kmz kmz;
application/vnd.ms-excel xls;
application/vnd.ms-fontobject eot;
application/vnd.ms-powerpoint ppt;
application/vnd.oasis.opendocument.graphics odg;
application/vnd.oasis.opendocument.presentation odp;
application/vnd.oasis.opendocument.spreadsheet ods;
application/vnd.oasis.opendocument.text odt;
application/vnd.openxmlformats-officedocument.presentationml.presentation
pptx;
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
xlsx;
application/vnd.openxmlformats-officedocument.wordprocessingml.document
docx;
application/vnd.wap.wmlc wmlc;
application/x-7z-compressed 7z;
application/x-cocoa cco;
application/x-java-archive-diff jardiff;
application/x-java-jnlp-file jnlp;
application/x-makeself run;
application/x-perl pl pm;
application/x-pilot prc pdb;
application/x-rar-compressed rar;
application/x-redhat-package-manager rpm;
application/x-sea sea;
application/x-shockwave-flash swf;
application/x-stuffit sit;
application/x-tcl tcl tk;
application/x-x509-ca-cert der pem crt;
application/x-xpinstall xpi;
application/xhtml+xml xhtml;
application/xspf+xml xspf;
application/zip zip;
application/octet-stream bin exe dll;
application/octet-stream deb;
application/octet-stream dmg;
application/octet-stream iso img;
application/octet-stream msi msp msm;
audio/midi mid midi kar;
audio/mpeg mp3;
audio/ogg ogg;
audio/x-m4a m4a;
audio/x-realaudio ra;
video/3gpp 3gpp 3gp;
video/mp2t ts;
video/mp4 mp4;
video/mpeg mpeg mpg;
video/quicktime mov;
video/webm webm;
video/x-flv flv;
video/x-m4v m4v;
video/x-mng mng;
video/x-ms-asf asx asf;
video/x-ms-wmv wmv;
video/x-msvideo avi;
}
confs/nginx/nginx.conf
+73
View File
@@ -0,0 +1,73 @@
#
user bitrix;
worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /var/runs/nginx/nginx.pid;
#
include /etc/nginx/inc/modules.conf;
#
events {
worker_connections 2048;
use epoll;
multi_accept on;
}
#
http {
server_tokens off;
###more_clear_headers Server;
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#sendfile_max_chunk 128k;
keepalive_timeout 75s;
keepalive_requests 1000;
client_body_buffer_size 512k;
client_header_buffer_size 512k;
large_client_header_buffers 4 64k;
client_max_body_size 1024m;
fastcgi_buffers 64 16k;
fastcgi_buffer_size 64k;
client_body_timeout 60s;
client_header_timeout 60s;
reset_timedout_connection on;
send_timeout 60s;
tcp_nopush on;
tcp_nodelay on;
server_names_hash_max_size 512;
server_names_hash_bucket_size 128;
types_hash_max_size 2048;
#
# gzip content compression params
#
gzip on;
gzip_vary on;
gzip_static on;
gzip_proxied any;
gzip_disable "msie6";
gzip_min_length 1100;
gzip_buffers 64 8k;
gzip_comp_level 5;
gzip_http_version 1.1;
gzip_types text/plain text/css text/javascript text/xml application/xml application/x-javascript application/json application/xml+rss;
#
# brotli content compression params
#
brotli on;
brotli_static on;
brotli_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml;
brotli_buffers 16 8k;
brotli_comp_level 6;
brotli_window 512k;
brotli_min_length 20;
include /etc/nginx/maps/*.conf;
include /etc/nginx/conf.d/*.conf;
}
#
confs/nginx/scgi_params
+16
View File
@@ -0,0 +1,16 @@
scgi_param REQUEST_METHOD $request_method;
scgi_param REQUEST_URI $request_uri;
scgi_param QUERY_STRING $query_string;
scgi_param CONTENT_TYPE $content_type;
scgi_param DOCUMENT_URI $document_uri;
scgi_param DOCUMENT_ROOT $document_root;
scgi_param SCGI 1;
scgi_param SERVER_PROTOCOL $server_protocol;
scgi_param REQUEST_SCHEME $scheme;
scgi_param HTTPS $https if_not_empty;
scgi_param REMOTE_ADDR $remote_addr;
scgi_param REMOTE_PORT $remote_port;
scgi_param SERVER_PORT $server_port;
scgi_param SERVER_NAME $server_name;
confs/nginx/ssl/ssl.conf
+82
View File
@@ -0,0 +1,82 @@
#
# ssl on;
#
# files
#
ssl_certificate /etc/nginx/certs/example.com/fullchain.pem;
ssl_certificate_key /etc/nginx/certs/example.com/privkey.pem;
ssl_trusted_certificate /etc/nginx/certs/example.com/chain.pem;
ssl_dhparam /etc/nginx/certs/example.com/dhparam.pem;
#
# ssl params
#
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256";
ssl_ecdh_curve prime256v1:secp384r1:secp521r1:X25519;
ssl_early_data on;
#
# ssl session cache
#
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_session_tickets on;
#
# ocsp
#
ssl_stapling off;
ssl_stapling_verify off;
resolver 8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout 10s;
#
# csp
#
# add_header Content-Security-Policy-Report-Only "";
# add_header X-Content-Security-Policy-Report-Only "";
# add_header X-WebKit-CSP-Report-Only "";
#
# headers
#
# add_header Public-Key-Pins 'pin-sha256=""; pin-sha256=""; pin-sha256=""; pin-sha256=""; pin-sha256=""; pin-sha256=""; max-age=31536000;';
# add_header Frame-Options SAMEORIGIN;
# add_header X-Frame-Options SAMEORIGIN;
# add_header X-Content-Type-Options nosniff;
# add_header X-XSS-Protection "1; mode=block";
add_header Strict-Transport-Security "max-age=15552000;"; # 180 days
#
# other
#
ssl_buffer_size 4k;
keepalive_timeout 70;
keepalive_requests 150;
#
# http2
# https://nginx.org/ru/docs/http/ngx_http_v2_module.html
#
http2 on;
http2_body_preread_size 64k;
http2_chunk_size 8k;
# http2_idle_timeout 3m; -> keepalive_timeout use, obsolete 1.19.7
# http2_max_concurrent_pushes 10; -> obsolete 1.25.1
http2_max_concurrent_streams 128;
# http2_max_field_size 4k; -> large_client_header_buffers use, obsolete 1.19.7
# http2_max_header_size 16k; -> large_client_header_buffers use, obsolete 1.19.7
# http2_max_requests 1000; -> keepalive_requests use, obsolete 1.19.7
# http2_push off; -> obsolete 1.25.1
# http2_push_preload off; -> obsolete 1.25.1
# http2_recv_buffer_size 256k; -> only on http available
# http2_recv_timeout 30s; -> client_header_timeout use, obsolete 1.19.7
#
# http3
# https://nginx.org/ru/docs/http/ngx_http_v3_module.html
#
# http3 on;
# http3_hq off;
# http3_max_concurrent_streams 128;
# http3_stream_buffer_size 64k;
# quic_active_connection_id_limit 2;
# quic_bpf off;
# quic_gso off;
# quic_host_key file;
# quic_retry off;
#
confs/nginx/uwsgi_params
+16
View File
@@ -0,0 +1,16 @@
uwsgi_param QUERY_STRING $query_string;
uwsgi_param REQUEST_METHOD $request_method;
uwsgi_param CONTENT_TYPE $content_type;
uwsgi_param CONTENT_LENGTH $content_length;
uwsgi_param REQUEST_URI $request_uri;
uwsgi_param PATH_INFO $document_uri;
uwsgi_param DOCUMENT_ROOT $document_root;
uwsgi_param SERVER_PROTOCOL $server_protocol;
uwsgi_param REQUEST_SCHEME $scheme;
uwsgi_param HTTPS $https if_not_empty;
uwsgi_param REMOTE_ADDR $remote_addr;
uwsgi_param REMOTE_PORT $remote_port;
uwsgi_param SERVER_PORT $server_port;
uwsgi_param SERVER_NAME $server_name;
confs/nginx/win-utf
+125
View File
@@ -0,0 +1,125 @@
# This map is not a full windows-1251 <> utf8 map: it does not
# contain Serbian and Macedonian letters. If you need a full map,
# use contrib/unicode2nginx/win-utf map instead.
charset_map windows-1251 utf-8 {
82 E2809A ; # single low-9 quotation mark
84 E2809E ; # double low-9 quotation mark
85 E280A6 ; # ellipsis
86 E280A0 ; # dagger
87 E280A1 ; # double dagger
88 E282AC ; # euro
89 E280B0 ; # per mille
91 E28098 ; # left single quotation mark
92 E28099 ; # right single quotation mark
93 E2809C ; # left double quotation mark
94 E2809D ; # right double quotation mark
95 E280A2 ; # bullet
96 E28093 ; # en dash
97 E28094 ; # em dash
99 E284A2 ; # trade mark sign
A0 C2A0 ; # &nbsp;
A1 D18E ; # capital Byelorussian short U
A2 D19E ; # small Byelorussian short u
A4 C2A4 ; # currency sign
A5 D290 ; # capital Ukrainian soft G
A6 C2A6 ; # borken bar
A7 C2A7 ; # section sign
A8 D081 ; # capital YO
A9 C2A9 ; # (C)
AA D084 ; # capital Ukrainian YE
AB C2AB ; # left-pointing double angle quotation mark
AC C2AC ; # not sign
AD C2AD ; # soft hypen
AE C2AE ; # (R)
AF D087 ; # capital Ukrainian YI
B0 C2B0 ; # &deg;
B1 C2B1 ; # plus-minus sign
B2 D086 ; # capital Ukrainian I
B3 D196 ; # small Ukrainian i
B4 D291 ; # small Ukrainian soft g
B5 C2B5 ; # micro sign
B6 C2B6 ; # pilcrow sign
B7 C2B7 ; # &middot;
B8 D191 ; # small yo
B9 E28496 ; # numero sign
BA D194 ; # small Ukrainian ye
BB C2BB ; # right-pointing double angle quotation mark
BF D197 ; # small Ukrainian yi
C0 D090 ; # capital A
C1 D091 ; # capital B
C2 D092 ; # capital V
C3 D093 ; # capital G
C4 D094 ; # capital D
C5 D095 ; # capital YE
C6 D096 ; # capital ZH
C7 D097 ; # capital Z
C8 D098 ; # capital I
C9 D099 ; # capital J
CA D09A ; # capital K
CB D09B ; # capital L
CC D09C ; # capital M
CD D09D ; # capital N
CE D09E ; # capital O
CF D09F ; # capital P
D0 D0A0 ; # capital R
D1 D0A1 ; # capital S
D2 D0A2 ; # capital T
D3 D0A3 ; # capital U
D4 D0A4 ; # capital F
D5 D0A5 ; # capital KH
D6 D0A6 ; # capital TS
D7 D0A7 ; # capital CH
D8 D0A8 ; # capital SH
D9 D0A9 ; # capital SHCH
DA D0AA ; # capital hard sign
DB D0AB ; # capital Y
DC D0AC ; # capital soft sign
DD D0AD ; # capital E
DE D0AE ; # capital YU
DF D0AF ; # capital YA
E0 D0B0 ; # small a
E1 D0B1 ; # small b
E2 D0B2 ; # small v
E3 D0B3 ; # small g
E4 D0B4 ; # small d
E5 D0B5 ; # small ye
E6 D0B6 ; # small zh
E7 D0B7 ; # small z
E8 D0B8 ; # small i
E9 D0B9 ; # small j
EA D0BA ; # small k
EB D0BB ; # small l
EC D0BC ; # small m
ED D0BD ; # small n
EE D0BE ; # small o
EF D0BF ; # small p
F0 D180 ; # small r
F1 D181 ; # small s
F2 D182 ; # small t
F3 D183 ; # small u
F4 D184 ; # small f
F5 D185 ; # small kh
F6 D186 ; # small ts
F7 D187 ; # small ch
F8 D188 ; # small sh
F9 D189 ; # small shch
FA D18A ; # small hard sign
FB D18B ; # small y
FC D18C ; # small soft sign
FD D18D ; # small e
FE D18E ; # small yu
FF D18F ; # small ya
}