-
Notifications
You must be signed in to change notification settings - Fork 9
/
docker-nginx.conf
37 lines (31 loc) · 1.38 KB
/
docker-nginx.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
server {
listen 80;
server_name localhost;
index index.html;
error_log /var/log/nginx/error.log;
access_log /var/log/nginx/access.log;
root /app/web;
rewrite ^/api$ /api.html;
location / {
try_files $uri $uri/ /app.php$is_args$args;
}
location ~ \.php {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_index app.php;
fastcgi_pass neucore_php:9000;
}
gzip_static on;
gzip_proxied any;
gzip on;
gzip_comp_level 5;
gzip_types text/plain text/html application/json font/ttf image/svg+xml image/x-icon;
gzip_min_length 1100;
add_header Strict-Transport-Security "max-age=31536000" always;
add_header Content-Security-Policy "default-src 'none'; style-src 'self'; script-src 'self'; font-src 'self' data:; img-src 'self' data: https://images.evetech.net; connect-src 'self' https://esi.evetech.net; form-action 'self'; base-uri 'none'; frame-ancestors 'none'; sandbox allow-downloads allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts allow-top-navigation;" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;
}