瀏覽代碼

Limits inside of locations

Bob Mottram 8 年之前
父節點
當前提交
4ffbae098b

+ 6
- 4
src/freedombone-app-blog 查看文件

418
     echo '    index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
418
     echo '    index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
419
     echo '    charset utf-8;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
419
     echo '    charset utf-8;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
420
     echo '    proxy_read_timeout 86400s;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
420
     echo '    proxy_read_timeout 86400s;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
421
-    function_check nginx_limits
422
-    nginx_limits $FULLBLOG_DOMAIN_NAME
423
     function_check nginx_ssl
421
     function_check nginx_ssl
424
     nginx_ssl $FULLBLOG_DOMAIN_NAME
422
     nginx_ssl $FULLBLOG_DOMAIN_NAME
425
     function_check nginx_disable_sniffing
423
     function_check nginx_disable_sniffing
428
     echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
426
     echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
429
     echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
427
     echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
430
     echo '    location / {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
428
     echo '    location / {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
429
+    function_check nginx_limits
430
+    nginx_limits $FULLBLOG_DOMAIN_NAME
431
     echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
431
     echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
432
     echo '    }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
432
     echo '    }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
433
     echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
433
     echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
501
     echo '    index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
501
     echo '    index index.php;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
502
     echo '    charset utf-8;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
502
     echo '    charset utf-8;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
503
     echo '    proxy_read_timeout 86400s;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
503
     echo '    proxy_read_timeout 86400s;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
504
-    function_check nginx_limits
505
-    nginx_limits $FULLBLOG_DOMAIN_NAME
506
     function_check nginx_disable_sniffing
504
     function_check nginx_disable_sniffing
507
     nginx_disable_sniffing $FULLBLOG_DOMAIN_NAME
505
     nginx_disable_sniffing $FULLBLOG_DOMAIN_NAME
508
     echo '    add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
506
     echo '    add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
509
     echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
507
     echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
510
     echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
508
     echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
511
     echo '    location / {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
509
     echo '    location / {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
510
+    function_check nginx_limits
511
+    nginx_limits $FULLBLOG_DOMAIN_NAME
512
     echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
512
     echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
513
     echo '    }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
513
     echo '    }' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
514
     echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
514
     echo '' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
535
     echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
535
     echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
536
     echo '    # or a unix socket' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
536
     echo '    # or a unix socket' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
537
     echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
537
     echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
538
+    function_check nginx_limits
539
+    nginx_limits $FULLBLOG_DOMAIN_NAME
538
     echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
540
     echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
539
     echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
541
     echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
540
     echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME
542
     echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$FULLBLOG_DOMAIN_NAME

+ 4
- 4
src/freedombone-app-gnusocial 查看文件

449
         function_check nginx_disable_sniffing
449
         function_check nginx_disable_sniffing
450
         nginx_disable_sniffing $MICROBLOG_DOMAIN_NAME
450
         nginx_disable_sniffing $MICROBLOG_DOMAIN_NAME
451
 
451
 
452
-        function_check nginx_limits
453
-        nginx_limits $MICROBLOG_DOMAIN_NAME '15m'
454
         echo '  add_header Strict-Transport-Security max-age=15768000;' >> $microblog_nginx_site
452
         echo '  add_header Strict-Transport-Security max-age=15768000;' >> $microblog_nginx_site
455
         echo '' >> $microblog_nginx_site
453
         echo '' >> $microblog_nginx_site
456
         echo '  # Logs' >> $microblog_nginx_site
454
         echo '  # Logs' >> $microblog_nginx_site
471
         echo '' >> $microblog_nginx_site
469
         echo '' >> $microblog_nginx_site
472
         echo '  # Location' >> $microblog_nginx_site
470
         echo '  # Location' >> $microblog_nginx_site
473
         echo '  location / {' >> $microblog_nginx_site
471
         echo '  location / {' >> $microblog_nginx_site
472
+        function_check nginx_limits
473
+        nginx_limits $MICROBLOG_DOMAIN_NAME '15m'
474
         echo '    try_files $uri $uri/ @gnusocial;' >> $microblog_nginx_site
474
         echo '    try_files $uri $uri/ @gnusocial;' >> $microblog_nginx_site
475
         echo '  }' >> $microblog_nginx_site
475
         echo '  }' >> $microblog_nginx_site
476
         echo '' >> $microblog_nginx_site
476
         echo '' >> $microblog_nginx_site
493
     echo '' >> $microblog_nginx_site
493
     echo '' >> $microblog_nginx_site
494
     function_check nginx_disable_sniffing
494
     function_check nginx_disable_sniffing
495
     nginx_disable_sniffing $MICROBLOG_DOMAIN_NAME
495
     nginx_disable_sniffing $MICROBLOG_DOMAIN_NAME
496
-    function_check nginx_limits
497
-    nginx_limits $MICROBLOG_DOMAIN_NAME '15m'
498
     echo '' >> $microblog_nginx_site
496
     echo '' >> $microblog_nginx_site
499
     echo '  # Logs' >> $microblog_nginx_site
497
     echo '  # Logs' >> $microblog_nginx_site
500
     echo '  access_log off;' >> $microblog_nginx_site
498
     echo '  access_log off;' >> $microblog_nginx_site
514
     echo '' >> $microblog_nginx_site
512
     echo '' >> $microblog_nginx_site
515
     echo '  # Location' >> $microblog_nginx_site
513
     echo '  # Location' >> $microblog_nginx_site
516
     echo '  location / {' >> $microblog_nginx_site
514
     echo '  location / {' >> $microblog_nginx_site
515
+    function_check nginx_limits
516
+    nginx_limits $MICROBLOG_DOMAIN_NAME '15m'
517
     echo '    try_files $uri $uri/ @gnusocial;' >> $microblog_nginx_site
517
     echo '    try_files $uri $uri/ @gnusocial;' >> $microblog_nginx_site
518
     echo '  }' >> $microblog_nginx_site
518
     echo '  }' >> $microblog_nginx_site
519
     echo '' >> $microblog_nginx_site
519
     echo '' >> $microblog_nginx_site

+ 4
- 4
src/freedombone-app-gogs 查看文件

583
         echo '    access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
583
         echo '    access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
584
         echo "    error_log /var/log/nginx/${GIT_DOMAIN_NAME}_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
584
         echo "    error_log /var/log/nginx/${GIT_DOMAIN_NAME}_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
585
         echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
585
         echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
586
-        function_check nginx_limits
587
-        nginx_limits $GIT_DOMAIN_NAME '10G'
588
         function_check nginx_ssl
586
         function_check nginx_ssl
589
         nginx_ssl $GIT_DOMAIN_NAME
587
         nginx_ssl $GIT_DOMAIN_NAME
590
         function_check nginx_disable_sniffing
588
         function_check nginx_disable_sniffing
592
         echo '    add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
590
         echo '    add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
593
         echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
591
         echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
594
         echo '    location / {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
592
         echo '    location / {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
593
+        function_check nginx_limits
594
+        nginx_limits $GIT_DOMAIN_NAME '10G'
595
         echo '        proxy_pass http://localhost:3000;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
595
         echo '        proxy_pass http://localhost:3000;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
596
         echo '    }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
596
         echo '    }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
597
         echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
597
         echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
617
     echo '    access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
617
     echo '    access_log off;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
618
     echo "    error_log /var/log/nginx/${GIT_DOMAIN_NAME}_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
618
     echo "    error_log /var/log/nginx/${GIT_DOMAIN_NAME}_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
619
     echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
619
     echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
620
-    function_check nginx_limits
621
-    nginx_limits $GIT_DOMAIN_NAME '10G'
622
     function_check nginx_disable_sniffing
620
     function_check nginx_disable_sniffing
623
     nginx_disable_sniffing $GIT_DOMAIN_NAME
621
     nginx_disable_sniffing $GIT_DOMAIN_NAME
624
     echo '    add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
622
     echo '    add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
625
     echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
623
     echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
626
     echo '    location / {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
624
     echo '    location / {' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
625
+    function_check nginx_limits
626
+    nginx_limits $GIT_DOMAIN_NAME '10G'
627
     echo '        proxy_pass http://localhost:3000;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
627
     echo '        proxy_pass http://localhost:3000;' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
628
     echo '    }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
628
     echo '    }' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
629
     echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME
629
     echo '' >> /etc/nginx/sites-available/$GIT_DOMAIN_NAME

+ 8
- 4
src/freedombone-app-hubzilla 查看文件

482
         echo '    index index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
482
         echo '    index index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
483
         echo '    charset utf-8;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
483
         echo '    charset utf-8;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
484
         echo '    access_log off;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
484
         echo '    access_log off;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
485
-        function_check nginx_limits
486
-        nginx_limits $HUBZILLA_DOMAIN_NAME
487
         function_check nginx_ssl
485
         function_check nginx_ssl
488
         nginx_ssl $HUBZILLA_DOMAIN_NAME
486
         nginx_ssl $HUBZILLA_DOMAIN_NAME
489
         function_check nginx_disable_sniffing
487
         function_check nginx_disable_sniffing
492
         echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
490
         echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
493
         echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
491
         echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
494
         echo '    location / {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
492
         echo '    location / {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
493
+        function_check nginx_limits
494
+        nginx_limits $HUBZILLA_DOMAIN_NAME
495
         echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
495
         echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
496
         echo '    }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
496
         echo '    }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
497
         echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
497
         echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
519
         echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
519
         echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
520
         echo '    # or a unix socket' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
520
         echo '    # or a unix socket' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
521
         echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
521
         echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
522
+        function_check nginx_limits
523
+        nginx_limits $HUBZILLA_DOMAIN_NAME
522
         echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
524
         echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
523
         echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
525
         echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
524
         echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
526
         echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
557
         echo '    index index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
559
         echo '    index index.php;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
558
         echo '    charset utf-8;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
560
         echo '    charset utf-8;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
559
         echo '    access_log off;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
561
         echo '    access_log off;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
560
-        nginx_limits $HUBZILLA_DOMAIN_NAME
561
-        nginx_disable_sniffing $HUBZILLA_DOMAIN_NAME
562
         echo '    add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
562
         echo '    add_header Strict-Transport-Security max-age=15768000;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
563
         echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
563
         echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
564
         echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
564
         echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
565
         echo '    location / {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
565
         echo '    location / {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
566
+        nginx_limits $HUBZILLA_DOMAIN_NAME
567
+        nginx_disable_sniffing $HUBZILLA_DOMAIN_NAME
566
         echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
568
         echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
567
         echo '    }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
569
         echo '    }' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
568
         echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
570
         echo '' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
590
         echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
592
         echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
591
         echo '    # or a unix socket' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
593
         echo '    # or a unix socket' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
592
         echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
594
         echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
595
+        nginx_limits $HUBZILLA_DOMAIN_NAME
596
+        nginx_disable_sniffing $HUBZILLA_DOMAIN_NAME
593
         echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
597
         echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
594
         echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
598
         echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
595
         echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME
599
         echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$HUBZILLA_DOMAIN_NAME

+ 20
- 4
src/freedombone-app-mediagoblin 查看文件

385
         echo '  default_type  application/octet-stream;' >> $MEDIAGOBLIN_VIRTUAL_HOST
385
         echo '  default_type  application/octet-stream;' >> $MEDIAGOBLIN_VIRTUAL_HOST
386
         echo '  sendfile on;' >> $MEDIAGOBLIN_VIRTUAL_HOST
386
         echo '  sendfile on;' >> $MEDIAGOBLIN_VIRTUAL_HOST
387
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
387
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
388
-        function_check nginx_limits
389
-        nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
390
         function_check nginx_ssl
388
         function_check nginx_ssl
391
         nginx_ssl $MEDIAGOBLIN_DOMAIN_NAME
389
         nginx_ssl $MEDIAGOBLIN_DOMAIN_NAME
392
         function_check nginx_disable_sniffing
390
         function_check nginx_disable_sniffing
409
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
407
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
410
         echo '  # MediaGoblins stock static files: CSS, JS, etc.' >> $MEDIAGOBLIN_VIRTUAL_HOST
408
         echo '  # MediaGoblins stock static files: CSS, JS, etc.' >> $MEDIAGOBLIN_VIRTUAL_HOST
411
         echo '  location /mgoblin_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
409
         echo '  location /mgoblin_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
410
+        function_check nginx_limits
411
+        nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
412
         echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/mediagoblin/static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
412
         echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/mediagoblin/static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
413
         echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
413
         echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
414
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
414
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
415
         echo '  # Instance specific media:' >> $MEDIAGOBLIN_VIRTUAL_HOST
415
         echo '  # Instance specific media:' >> $MEDIAGOBLIN_VIRTUAL_HOST
416
         echo '  location /mgoblin_media/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
416
         echo '  location /mgoblin_media/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
417
+        function_check nginx_limits
418
+        nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
417
         echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/media/public/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
419
         echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/media/public/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
418
         echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
420
         echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
419
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
421
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
420
         echo '  # Theme static files (usually symlinked in)' >> $MEDIAGOBLIN_VIRTUAL_HOST
422
         echo '  # Theme static files (usually symlinked in)' >> $MEDIAGOBLIN_VIRTUAL_HOST
421
         echo '  location /theme_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
423
         echo '  location /theme_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
424
+        function_check nginx_limits
425
+        nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
422
         echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/theme_static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
426
         echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/theme_static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
423
         echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
427
         echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
424
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
428
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
425
         echo '  # Plugin static files (usually symlinked in)' >> $MEDIAGOBLIN_VIRTUAL_HOST
429
         echo '  # Plugin static files (usually symlinked in)' >> $MEDIAGOBLIN_VIRTUAL_HOST
426
         echo '  location /plugin_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
430
         echo '  location /plugin_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
431
+        function_check nginx_limits
432
+        nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
427
         echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/plugin_static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
433
         echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/plugin_static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
428
         echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
434
         echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
429
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
435
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
430
         echo '  # Mounting MediaGoblin itself via FastCGI.' >> $MEDIAGOBLIN_VIRTUAL_HOST
436
         echo '  # Mounting MediaGoblin itself via FastCGI.' >> $MEDIAGOBLIN_VIRTUAL_HOST
431
         echo '  location / {' >> $MEDIAGOBLIN_VIRTUAL_HOST
437
         echo '  location / {' >> $MEDIAGOBLIN_VIRTUAL_HOST
438
+        function_check nginx_limits
439
+        nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
432
         echo '    fastcgi_pass 127.0.0.1:26543;' >> $MEDIAGOBLIN_VIRTUAL_HOST
440
         echo '    fastcgi_pass 127.0.0.1:26543;' >> $MEDIAGOBLIN_VIRTUAL_HOST
433
         echo '    include /etc/nginx/fastcgi_params;' >> $MEDIAGOBLIN_VIRTUAL_HOST
441
         echo '    include /etc/nginx/fastcgi_params;' >> $MEDIAGOBLIN_VIRTUAL_HOST
434
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
442
         echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
454
     echo '  default_type  application/octet-stream;' >> $MEDIAGOBLIN_VIRTUAL_HOST
462
     echo '  default_type  application/octet-stream;' >> $MEDIAGOBLIN_VIRTUAL_HOST
455
     echo '  sendfile on;' >> $MEDIAGOBLIN_VIRTUAL_HOST
463
     echo '  sendfile on;' >> $MEDIAGOBLIN_VIRTUAL_HOST
456
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
464
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
457
-    function_check nginx_limits
458
-    nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
459
     function_check nginx_disable_sniffing
465
     function_check nginx_disable_sniffing
460
     nginx_disable_sniffing $MEDIAGOBLIN_DOMAIN_NAME
466
     nginx_disable_sniffing $MEDIAGOBLIN_DOMAIN_NAME
461
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
467
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
476
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
482
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
477
     echo '  # MediaGoblins stock static files: CSS, JS, etc.' >> $MEDIAGOBLIN_VIRTUAL_HOST
483
     echo '  # MediaGoblins stock static files: CSS, JS, etc.' >> $MEDIAGOBLIN_VIRTUAL_HOST
478
     echo '  location /mgoblin_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
484
     echo '  location /mgoblin_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
485
+    function_check nginx_limits
486
+    nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
479
     echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/mediagoblin/static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
487
     echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/mediagoblin/static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
480
     echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
488
     echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
481
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
489
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
482
     echo '  # Instance specific media:' >> $MEDIAGOBLIN_VIRTUAL_HOST
490
     echo '  # Instance specific media:' >> $MEDIAGOBLIN_VIRTUAL_HOST
483
     echo '  location /mgoblin_media/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
491
     echo '  location /mgoblin_media/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
492
+    function_check nginx_limits
493
+    nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
484
     echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/media/public/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
494
     echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/media/public/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
485
     echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
495
     echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
486
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
496
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
487
     echo '  # Theme static files (usually symlinked in)' >> $MEDIAGOBLIN_VIRTUAL_HOST
497
     echo '  # Theme static files (usually symlinked in)' >> $MEDIAGOBLIN_VIRTUAL_HOST
488
     echo '  location /theme_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
498
     echo '  location /theme_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
499
+    function_check nginx_limits
500
+    nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
489
     echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/theme_static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
501
     echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/theme_static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
490
     echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
502
     echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
491
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
503
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
492
     echo '  # Plugin static files (usually symlinked in)' >> $MEDIAGOBLIN_VIRTUAL_HOST
504
     echo '  # Plugin static files (usually symlinked in)' >> $MEDIAGOBLIN_VIRTUAL_HOST
493
     echo '  location /plugin_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
505
     echo '  location /plugin_static/ {' >> $MEDIAGOBLIN_VIRTUAL_HOST
506
+    function_check nginx_limits
507
+    nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
494
     echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/plugin_static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
508
     echo "    alias $MEDIAGOBLIN_WORKING_DIRECTORY/user_dev/plugin_static/;" >> $MEDIAGOBLIN_VIRTUAL_HOST
495
     echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
509
     echo '  }' >> $MEDIAGOBLIN_VIRTUAL_HOST
496
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
510
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
497
     echo '  # Mounting MediaGoblin itself via FastCGI.' >> $MEDIAGOBLIN_VIRTUAL_HOST
511
     echo '  # Mounting MediaGoblin itself via FastCGI.' >> $MEDIAGOBLIN_VIRTUAL_HOST
498
     echo '  location / {' >> $MEDIAGOBLIN_VIRTUAL_HOST
512
     echo '  location / {' >> $MEDIAGOBLIN_VIRTUAL_HOST
513
+    function_check nginx_limits
514
+    nginx_limits $MEDIAGOBLIN_DOMAIN_NAME '20m'
499
     echo '    fastcgi_pass 127.0.0.1:26543;' >> $MEDIAGOBLIN_VIRTUAL_HOST
515
     echo '    fastcgi_pass 127.0.0.1:26543;' >> $MEDIAGOBLIN_VIRTUAL_HOST
500
     echo '    include /etc/nginx/fastcgi_params;' >> $MEDIAGOBLIN_VIRTUAL_HOST
516
     echo '    include /etc/nginx/fastcgi_params;' >> $MEDIAGOBLIN_VIRTUAL_HOST
501
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST
517
     echo '' >> $MEDIAGOBLIN_VIRTUAL_HOST

+ 2
- 2
src/freedombone-app-searx 查看文件

214
     echo '    access_log off;' >> /etc/nginx/sites-available/searx
214
     echo '    access_log off;' >> /etc/nginx/sites-available/searx
215
     echo "    error_log /var/log/searx_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/searx
215
     echo "    error_log /var/log/searx_error.log $WEBSERVER_LOG_LEVEL;" >> /etc/nginx/sites-available/searx
216
     echo '' >> /etc/nginx/sites-available/searx
216
     echo '' >> /etc/nginx/sites-available/searx
217
-    function_check nginx_limits
218
-    nginx_limits searx '1M'
219
     function_check nginx_disable_sniffing
217
     function_check nginx_disable_sniffing
220
     nginx_disable_sniffing searx
218
     nginx_disable_sniffing searx
221
     echo '    add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/searx
219
     echo '    add_header Strict-Transport-Security max-age=0;' >> /etc/nginx/sites-available/searx
222
     echo '' >> /etc/nginx/sites-available/searx
220
     echo '' >> /etc/nginx/sites-available/searx
223
     echo '    location / {' >> /etc/nginx/sites-available/searx
221
     echo '    location / {' >> /etc/nginx/sites-available/searx
222
+    function_check nginx_limits
223
+    nginx_limits searx '1M'
224
     echo '        proxy_pass http://localhost:8888;' >> /etc/nginx/sites-available/searx
224
     echo '        proxy_pass http://localhost:8888;' >> /etc/nginx/sites-available/searx
225
     echo '        proxy_set_header Host $host;' >> /etc/nginx/sites-available/searx
225
     echo '        proxy_set_header Host $host;' >> /etc/nginx/sites-available/searx
226
     echo '        proxy_set_header X-Real-IP $remote_addr;' >> /etc/nginx/sites-available/searx
226
     echo '        proxy_set_header X-Real-IP $remote_addr;' >> /etc/nginx/sites-available/searx

+ 14
- 6
src/freedombone-app-wiki 查看文件

384
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
384
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
385
         function_check nginx_disable_sniffing
385
         function_check nginx_disable_sniffing
386
         nginx_disable_sniffing $WIKI_DOMAIN_NAME
386
         nginx_disable_sniffing $WIKI_DOMAIN_NAME
387
-        function_check nginx_limits
388
-        nginx_limits $WIKI_DOMAIN_NAME
389
         echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
387
         echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
390
         echo '    location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
388
         echo '    location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
389
+        function_check nginx_limits
390
+        nginx_limits $WIKI_DOMAIN_NAME
391
         echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
391
         echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
392
         echo '    }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
392
         echo '    }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
393
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
393
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
414
         echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
414
         echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
415
         echo '    # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
415
         echo '    # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
416
         echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
416
         echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
417
+        function_check nginx_limits
418
+        nginx_limits $WIKI_DOMAIN_NAME
417
         echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
419
         echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
418
         echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
420
         echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
419
         echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
421
         echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
458
         echo '    index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
460
         echo '    index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
459
         echo '    charset utf-8;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
461
         echo '    charset utf-8;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
460
         echo '    proxy_read_timeout 86400s;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
462
         echo '    proxy_read_timeout 86400s;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
461
-        function_check nginx_limits
462
-        nginx_limits $WIKI_DOMAIN_NAME
463
         function_check nginx_ssl
463
         function_check nginx_ssl
464
         nginx_ssl $WIKI_DOMAIN_NAME
464
         nginx_ssl $WIKI_DOMAIN_NAME
465
         function_check nginx_disable_sniffing
465
         function_check nginx_disable_sniffing
468
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
468
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
469
         echo '    # webmail' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
469
         echo '    # webmail' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
470
         echo '    location /webmail {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
470
         echo '    location /webmail {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
471
+        function_check nginx_limits
472
+        nginx_limits $WIKI_DOMAIN_NAME
471
         echo '        rewrite ^/(.*) /webmail/index.php last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
473
         echo '        rewrite ^/(.*) /webmail/index.php last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
472
         echo '        rewrite ^/(.*) /webmail/installer/index.php last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
474
         echo '        rewrite ^/(.*) /webmail/installer/index.php last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
473
         echo '    }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
475
         echo '    }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
474
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
476
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
475
         echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
477
         echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
476
         echo '    location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
478
         echo '    location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
479
+        function_check nginx_limits
480
+        nginx_limits $WIKI_DOMAIN_NAME
477
         echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
481
         echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
478
         echo '    }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
482
         echo '    }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
479
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
483
         echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
500
         echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
504
         echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
501
         echo '    # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
505
         echo '    # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
502
         echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
506
         echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
507
+        function_check nginx_limits
508
+        nginx_limits $WIKI_DOMAIN_NAME
503
         echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
509
         echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
504
         echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
510
         echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
505
         echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
511
         echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
547
     echo '    index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
553
     echo '    index index.php;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
548
     echo '    charset utf-8;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
554
     echo '    charset utf-8;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
549
     echo '    proxy_read_timeout 86400s;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
555
     echo '    proxy_read_timeout 86400s;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
550
-    function_check nginx_limits
551
-    nginx_limits $WIKI_DOMAIN_NAME
552
     function_check nginx_disable_sniffing
556
     function_check nginx_disable_sniffing
553
     nginx_disable_sniffing $WIKI_DOMAIN_NAME
557
     nginx_disable_sniffing $WIKI_DOMAIN_NAME
554
     echo '    add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
558
     echo '    add_header Strict-Transport-Security "max-age=0;";' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
555
     echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
559
     echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
556
     echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
560
     echo '    # rewrite to front controller as default rule' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
557
     echo '    location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
561
     echo '    location / {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
562
+    function_check nginx_limits
563
+    nginx_limits $WIKI_DOMAIN_NAME
558
     echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
564
     echo '        rewrite ^/(.*) /index.php?q=$uri&$args last;' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
559
     echo '    }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
565
     echo '    }' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
560
     echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
566
     echo '' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
581
     echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
587
     echo '    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
582
     echo '    # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
588
     echo '    # or a unix socket' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
583
     echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
589
     echo '    location ~* \.php$ {' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
590
+    function_check nginx_limits
591
+    nginx_limits $WIKI_DOMAIN_NAME
584
     echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
592
     echo '        # Zero-day exploit defense.' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
585
     echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
593
     echo '        # http://forum.nginx.org/read.php?2,88845,page=3' >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
586
     echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME
594
     echo "        # Won't work properly (404 error) if the file is not stored on this" >> /etc/nginx/sites-available/$WIKI_DOMAIN_NAME