ikan Uploader :
Directory : /etc/nginx/sites-enabled/
Upload File : |
| Current File : //etc/nginx/sites-enabled/new-ppid |
server {
listen 80;
listen [::]:80;
server_name ppid.mamujutengahkab.go.id www.ppid.mamujutengahkab.go.id;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name ppid.mamujutengahkab.go.id www.ppid.mamujutengahkab.go.id;
root /var/www/new-ppid-app;
index index.php index.html;
charset utf-8;
client_max_body_size 12M;
ssl_certificate /etc/nginx/ssl/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/star_mamujutengahkab_go_id.key;
#ssl_trusted_certificate /etc/nginx/ssl/Chain_RootCA_Bundle.crt;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:20m;
ssl_prefer_server_ciphers off;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy strict-origin-when-cross-origin always;
location / {
try_files $uri $uri/ $uri.php$is_args$args;
}
location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/run/php/php8.2-fpm.sock;
fastcgi_read_timeout 300;
}
location ~ ^/(config|includes|resources|scripts|database)/ {
deny all;
}
location ~ /\.(git|env|htaccess)$ {
deny all;
}
location ^~ /uploads/ {
location ~* \.(php|phtml|phar|pl|py|cgi|sh|asp|aspx)$ {
deny all;
}
expires 30d;
access_log off;
}
location ~* \.(css|js|jpg|jpeg|png|gif|svg|ico|webp|woff|woff2|ttf|eot|mp4)$ {
expires 30d;
add_header Cache-Control "public, immutable";
access_log off;
}
gzip on;
gzip_min_length 1024;
gzip_comp_level 5;
gzip_types text/plain text/css application/javascript application/json application/xml text/xml image/svg+xml;
}
Kontol Shell Bypass