summary refs log tree commit diff
path: root/nixos/modules/services/web-apps
diff options
context:
space:
mode:
authorMaximilian Bosch <maximilian@mbosch.me>2019-10-25 19:12:18 +0200
committerGitHub <noreply@github.com>2019-10-25 19:12:18 +0200
commit4a5c0e029ddbe89aa4eb4da7949219fe4e3f8472 (patch)
tree01a332c7f06dc561459e2428e2e4109a3b9bccfb /nixos/modules/services/web-apps
parenta6b64a828d161cf8471e0bf5e709cef99b11f4e1 (diff)
parentf6c45bff6d4ab6e2a7b64994c6d4ff4efbb98e6d (diff)
downloadnixpkgs-4a5c0e029ddbe89aa4eb4da7949219fe4e3f8472.tar
nixpkgs-4a5c0e029ddbe89aa4eb4da7949219fe4e3f8472.tar.gz
nixpkgs-4a5c0e029ddbe89aa4eb4da7949219fe4e3f8472.tar.bz2
nixpkgs-4a5c0e029ddbe89aa4eb4da7949219fe4e3f8472.tar.lz
nixpkgs-4a5c0e029ddbe89aa4eb4da7949219fe4e3f8472.tar.xz
nixpkgs-4a5c0e029ddbe89aa4eb4da7949219fe4e3f8472.tar.zst
nixpkgs-4a5c0e029ddbe89aa4eb4da7949219fe4e3f8472.zip
Merge pull request #71963 from dtzWill/security/nextcloud17-php-and-nginx-config
Address nextcloud "urgent security issue" w/nginx per upstream recs
Diffstat (limited to 'nixos/modules/services/web-apps')
-rw-r--r--nixos/modules/services/web-apps/nextcloud.nix3
1 files changed, 2 insertions, 1 deletions
diff --git a/nixos/modules/services/web-apps/nextcloud.nix b/nixos/modules/services/web-apps/nextcloud.nix
index db5dc915c89..b40abf5e615 100644
--- a/nixos/modules/services/web-apps/nextcloud.nix
+++ b/nixos/modules/services/web-apps/nextcloud.nix
@@ -467,7 +467,7 @@ in {
               };
               "/" = {
                 priority = 200;
-                extraConfig = "rewrite ^ /index.php$request_uri;";
+                extraConfig = "rewrite ^ /index.php;";
               };
               "~ ^/store-apps" = {
                 priority = 201;
@@ -494,6 +494,7 @@ in {
                 extraConfig = ''
                   include ${config.services.nginx.package}/conf/fastcgi.conf;
                   fastcgi_split_path_info ^(.+\.php)(\\/.*)$;
+                  try_files $fastcgi_script_name =404;
                   fastcgi_param PATH_INFO $fastcgi_path_info;
                   fastcgi_param HTTPS ${if cfg.https then "on" else "off"};
                   fastcgi_param modHeadersAvailable true;