Initial commit

files/snippets/fastcgi-php.conf

@@ -0,0 +1,13 @@
+# regex to split $uri to $fastcgi_script_name and $fastcgi_path
+fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+
+# Check that the PHP script exists before passing it
+try_files $fastcgi_script_name =404;
+
+# Bypass the fact that try_files resets $fastcgi_path_info
+# see: http://trac.nginx.org/nginx/ticket/321
+set $path_info $fastcgi_path_info;
+fastcgi_param PATH_INFO $path_info;
+
+fastcgi_index index.php;
+include fastcgi.conf;

files/snippets/proxy-headers.conf

@@ -0,0 +1,5 @@
+# /etc/nginx/snippets/proxy-headers.conf
+proxy_set_header Host              $http_host;
+proxy_set_header X-Real-IP         $remote_addr;
+proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+proxy_set_header X-Forwarded-Proto $scheme;

files/snippets/ssl-params.conf

@@ -0,0 +1,10 @@
+# /etc/nginx/snippets/ssl-params.conf
+# Shared TLS parameters. Cert paths live with the site, not here.
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_prefer_server_ciphers on;
+ssl_ciphers EECDH+AESGCM:EDH+AESGCM;
+ssl_session_cache shared:SSL:10m;
+ssl_session_timeout 10m;
+
+ssl_stapling on;
+ssl_stapling_verify on;

files/snippets/websockets.conf

@@ -0,0 +1,6 @@
+# /etc/nginx/snippets/websockets.conf
+# enable websockets: http://nginx.org/en/docs/http/websocket.html
+proxy_http_version 1.1;
+proxy_set_header   Upgrade    $http_upgrade;
+proxy_set_header   Connection "upgrade";
+proxy_redirect     off;