empire-report-ny/wordpress-nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Security and exclusions restructure

Browse Source
This commit is contained in:
Ashley Rich 2015-11-17 20:01:46 +00:00
parent 382e0805ab
commit dffae61f68
8 changed files with 40 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
global/security.conf
View File

@ -1,16 +1,3 @@
# Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac).
# Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban)
location ~ /\. {
deny all;
}
# Deny access to any files with a .php extension in the uploads directory
# Works in sub-directory installs and also in multisite network
# Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban)
location ~* /(?:uploads|files)/.*\.php$ {
deny all;
}
# Hide Nginx version in error messages and reponse headers.
server_tokens off;

30
per-site/exclusions.conf Normal file
View File

@ -0,0 +1,30 @@
# Deny all attempts to access hidden files such as .htaccess, .htpasswd, .DS_Store (Mac).
# Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban)
location ~ /\. {
deny all;
}
# Deny access to any files with a .php extension in the uploads directory
# Works in sub-directory installs and also in multisite network
# Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban)
location ~* /(?:uploads|files)/.*\.php$ {
deny all;
}
# Don't record error/access logs for favicon.io.
location = /favicon.ico {
log_not_found off;
access_log off;
}
# Don't record error/access logs for robots.txt.
location = /robots.txt {
log_not_found off;
access_log off;
}
# Don't record error/access logs for static assets.
location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc|css|js)$ {
log_not_found off;
access_log off;
}

17
per-site/logs.conf
View File

@ -1,17 +0,0 @@
# Don't record error/access logs for favicon.io.
location = /favicon.ico {
log_not_found off;
access_log off;
}
# Don't record error/access logs for robots.txt.
location = /robots.txt {
log_not_found off;
access_log off;
}
# Don't record error/access logs for static assets.
location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc|css|js)$ {
log_not_found off;
access_log off;
}

4
sites-available/fastcgi-cache.com
View File

@ -20,8 +20,8 @@ server {
access_log /sites/fastcgi-cache.com/logs/access.log;
error_log /sites/fastcgi-cache.com/logs/error.log;
# Log exclusions
include per-site/logs.conf;
# Exclusions
include per-site/exclusions.conf;
# Cache static content
include per-site/cache.conf;

4
sites-available/multisite-subdirectory.com
View File

@ -15,8 +15,8 @@ server {
access_log /sites/multisite-subdirectory.com/logs/access.log;
error_log /sites/multisite-subdirectory.com/logs/error.log;
# Log exclusions
include per-site/logs.conf;
# Exclusions
include per-site/exclusions.conf;
# Cache static content
include per-site/cache.conf;

4
sites-available/multisite-subdomain.com
View File

@ -15,8 +15,8 @@ server {
access_log /sites/multisite-subdomain.com/logs/access.log;
error_log /sites/multisite-subdomain.com/logs/error.log;
# Log exclusions
include per-site/logs.conf;
# Exclusions
include per-site/exclusions.conf;
# Cache static content
include per-site/cache.conf;

4
sites-available/singlesite.com
View File

@ -15,8 +15,8 @@ server {
access_log /sites/singlesite.com/logs/access.log;
error_log /sites/singlesite.com/logs/error.log;
# Log exclusions
include per-site/logs.conf;
# Exclusions
include per-site/exclusions.conf;
# Cache static content
include per-site/cache.conf;

4
sites-available/ssl.com
View File

@ -20,8 +20,8 @@ server {
access_log /sites/ssl.com/logs/access.log;
error_log /sites/ssl.com/logs/error.log;
# Log exclusions
include per-site/logs.conf;
# Exclusions
include per-site/exclusions.conf;
# Cache static content
include per-site/cache.conf;