Merge retry.

nginx/sites-available/cloud.renatorosa.com

@@ -0,0 +1,128 @@
+upstream php-handler {
+    #server 127.0.0.1:9000;
+    #server unix:/var/run/php5-fpm.sock;
+    server unix:/var/run/php/php7.2-fpm.sock;
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name cloud.renatorosa.com;
+
+    # Add headers to serve security related headers
+    # Before enabling Strict-Transport-Security headers please read into this
+    # topic first.
+    # add_header Strict-Transport-Security "max-age=15768000;
+    # includeSubDomains; preload;";
+    #
+    # WARNING: Only add the preload option once you read about
+    # the consequences in https://hstspreload.org/. This option
+    # will add the domain to a hardcoded list that is shipped
+    # in all major browsers and getting removed from this list
+    # could take several months.
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection "1; mode=block";
+    add_header X-Robots-Tag none;
+    add_header X-Download-Options noopen;
+    add_header X-Permitted-Cross-Domain-Policies none;
+
+    # Path to the root of your installation
+    root /var/www/nextcloud/;
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # The following 2 rules are only needed for the user_webfinger app.
+    # Uncomment it if you're planning to use this app.
+    #rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
+    #rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json
+    # last;
+
+    location = /.well-known/carddav {
+      return 301 $scheme://$host/remote.php/dav;
+    }
+    location = /.well-known/caldav {
+      return 301 $scheme://$host/remote.php/dav;
+    }
+
+    # set max upload size
+    client_max_body_size 512M;
+    fastcgi_buffers 64 4K;
+
+    # Enable gzip but do not remove ETag headers
+    gzip on;
+    gzip_vary on;
+    gzip_comp_level 4;
+    gzip_min_length 256;
+    gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
+    gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
+
+    # Uncomment if your server is build with the ngx_pagespeed module
+    # This module is currently not supported.
+    #pagespeed off;
+
+    location / {
+        rewrite ^ /index.php$uri;
+   }
+
+    location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
+        deny all;
+    }
+    location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
+        deny all;
+    }
+
+    location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+)\.php(?:$|/) {
+        fastcgi_split_path_info ^(.+\.php)(/.*)$;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_param PATH_INFO $fastcgi_path_info;
+        fastcgi_param HTTPS on;
+        #Avoid sending the security headers twice
+        fastcgi_param modHeadersAvailable true;
+        fastcgi_param front_controller_active true;
+        fastcgi_pass php-handler;
+        fastcgi_intercept_errors on;
+        fastcgi_request_buffering off;
+    }
+
+    location ~ ^/(?:updater|ocs-provider)(?:$|/) {
+        try_files $uri/ =404;
+        index index.php;
+    }
+
+    # Adding the cache control header for js and css files
+    # Make sure it is BELOW the PHP block
+    location ~ \.(?:css|js|woff|svg|gif)$ {
+        try_files $uri /index.php$uri$is_args$args;
+        add_header Cache-Control "public, max-age=15778463";
+        # Add headers to serve security related headers (It is intended to
+        # have those duplicated to the ones above)
+        # Before enabling Strict-Transport-Security headers please read into
+        # this topic first.
+        add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
+        #
+        # WARNING: Only add the preload option once you read about
+        # the consequences in https://hstspreload.org/. This option
+        # will add the domain to a hardcoded list that is shipped
+        # in all major browsers and getting removed from this list
+        # could take several months.
+        add_header X-Content-Type-Options nosniff;
+        add_header X-XSS-Protection "1; mode=block";
+        add_header X-Robots-Tag none;
+        add_header X-Download-Options noopen;
+        add_header X-Permitted-Cross-Domain-Policies none;
+        # Optional: Don't log access to assets
+        access_log off;
+    }
+
+    location ~ \.(?:png|html|ttf|ico|jpg|jpeg)$ {
+        try_files $uri /index.php$uri$is_args$args;
+        # Optional: Don't log access to other assets
+        access_log off;
+    }
+}
+

nginx/sites-available/default

@@ -0,0 +1,91 @@
+##
+# You should look at the following URL's in order to grasp a solid understanding
+# of Nginx configuration files in order to fully unleash the power of Nginx.
+# https://www.nginx.com/resources/wiki/start/
+# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
+# https://wiki.debian.org/Nginx/DirectoryStructure
+#
+# In most cases, administrators will remove this file from sites-enabled/ and
+# leave it as reference inside of sites-available where it will continue to be
+# updated by the nginx packaging team.
+#
+# This file will automatically load configuration files provided by other
+# applications, such as Drupal or Wordpress. These applications will be made
+# available underneath a path with that package name, such as /drupal8.
+#
+# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
+##
+
+# Default server configuration
+#
+server {
+	listen 80 default_server;
+	listen [::]:80 default_server;
+
+	# SSL configuration
+	#
+	# listen 443 ssl default_server;
+	# listen [::]:443 ssl default_server;
+	#
+	# Note: You should disable gzip for SSL traffic.
+	# See: https://bugs.debian.org/773332
+	#
+	# Read up on ssl_ciphers to ensure a secure configuration.
+	# See: https://bugs.debian.org/765782
+	#
+	# Self signed certs generated by the ssl-cert package
+	# Don't use them in a production server!
+	#
+	# include snippets/snakeoil.conf;
+
+	root /var/www/html;
+
+	# Add index.php to the list if you are using PHP
+	index index.html index.htm index.nginx-debian.html;
+
+	server_name _;
+
+	location / {
+		# First attempt to serve request as file, then
+		# as directory, then fall back to displaying a 404.
+		try_files $uri $uri/ =404;
+	}
+
+	# pass PHP scripts to FastCGI server
+	#
+	#location ~ \.php$ {
+	#	include snippets/fastcgi-php.conf;
+	#
+	#	# With php-fpm (or other unix sockets):
+	#	fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
+	#	# With php-cgi (or other tcp sockets):
+	#	fastcgi_pass 127.0.0.1:9000;
+	#}
+
+	# deny access to .htaccess files, if Apache's document root
+	# concurs with nginx's one
+	#
+	#location ~ /\.ht {
+	#	deny all;
+	#}
+}
+
+
+# Virtual Host configuration for example.com
+#
+# You can move that to a different file under sites-available/ and symlink that
+# to sites-enabled/ to enable it.
+#
+#server {
+#	listen 80;
+#	listen [::]:80;
+#
+#	server_name example.com;
+#
+#	root /var/www/example.com;
+#	index index.html;
+#
+#	location / {
+#		try_files $uri $uri/ =404;
+#	}
+#}

nginx/sites-available/git.sp.renatorosa.com

@@ -0,0 +1,52 @@
+server {
+  listen 80;
+  server_name git.sp.renatorosa.com;
+
+  root /usr/share/gitweb;
+
+location ~ ^.*\.git/(HEAD|info/refs|objects/info/.*|git-(upload|receive)-pack)$ {
+    root /var/lib/git;
+ 
+    fastcgi_pass unix:/var/run/fcgiwrap.socket;
+    fastcgi_param SCRIPT_FILENAME   /usr/lib/git-core/git-http-backend;
+    fastcgi_param PATH_INFO         $uri;
+    fastcgi_param GIT_PROJECT_ROOT  /var/lib/git;  
+    include fastcgi_params;
+  }
+ 
+  # send anything else to gitweb if it's not a real file
+  try_files $uri @gitweb;
+  location @gitweb {
+    fastcgi_pass unix:/var/run/fcgiwrap.socket;
+    fastcgi_param SCRIPT_FILENAME   /usr/share/gitweb/gitweb.cgi;
+    fastcgi_param PATH_INFO         $uri;
+    fastcgi_param GITWEB_CONFIG     /etc/nginx/gitweb.conf;
+    include fastcgi_params;
+  }
+}
+
+
+
+
+#  location ~ ^.*\.git/(HEAD|info/refs|objects/info/.*|git-(upload|receive)-pack)$ {
+#    root /var/lib/git;
+#    try_files $uri /index.cgi;
+#  }
+#
+#  location /index.cgi {
+#    root /usr/share/gitweb/;
+#    root /var/lib/git;
+#    include fastcgi_params;
+#    gzip off;
+#    fastcgi_param SCRIPT_NAME $uri;
+#    fastcgi_param GITWEB_CONFIG /etc/gitweb.conf;
+#    fastcgi_pass  unix:/var/run/fcgiwrap.socket;
+#  }
+#
+#  location / {
+#    root /usr/share/gitweb/;
+#    root /var/lib/git;
+#    index index.cgi;
+#  }
+#}
+

nginx/sites-available/gitlist

@@ -0,0 +1,51 @@
+server {
+    server_name git.sp.renatorosa.com git.renatorosa.com gitlist.renatorosa.com gitlist.sp.renatorosa.com;
+    access_log /var/log/nginx/gitlist.access.log combined;
+    error_log /var/log/nginx/gitlist.error.log error;
+
+    root /var/www/p3x-gitlist/public;
+    index index.php;
+
+#   auth_basic "Restricted";
+#   auth_basic_user_file .htpasswd;
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* ^/index.php.*$ {
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+
+        # if you're using php5-fpm via tcp
+        #fastcgi_pass 127.0.0.1:9000;
+
+        # if you're using php5-fpm via socket
+        fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
+
+        include /etc/nginx/fastcgi_params;
+    }
+
+    location / {
+        try_files $uri @gitlist;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
+    add_header Vary "Accept-Encoding";
+        expires max;
+        try_files $uri @gitlist;
+        tcp_nodelay off;
+        tcp_nopush on;
+    }
+
+#   location ~* \.(git|svn|patch|htaccess|log|route|plist|inc|json|pl|po|sh|ini|sample|kdev4)$ {
+#       deny all;
+#   }
+
+    location @gitlist {
+        rewrite ^/.*$ /index.php;
+    }
+}
+

nginx/sites-available/gitweb

@@ -0,0 +1,21 @@
+location ~ ^.*\.git/(HEAD|info/refs|objects/info/.*|git-(upload|receive)-pack)$ {
+    root /var/www/web.git;
+ 
+    fastcgi_pass unix:/var/run/fcgiwrap.socket;
+    fastcgi_param SCRIPT_FILENAME   /usr/lib/git-core/git-http-backend;
+    fastcgi_param PATH_INFO         $uri;
+    fastcgi_param GIT_PROJECT_ROOT  /var/www/web.git;  
+    include fastcgi_params;
+  }
+ 
+  # send anything else to gitweb if it's not a real file
+  try_files $uri @gitweb;
+  location @gitweb {
+    fastcgi_pass unix:/var/run/fcgiwrap.socket;
+    fastcgi_param SCRIPT_FILENAME   /usr/share/gitweb/gitweb.cgi;
+    fastcgi_param PATH_INFO         $uri;
+    fastcgi_param GITWEB_CONFIG     /etc/nginx/gitweb.conf;
+    include fastcgi_params;
+  }
+}
+

nginx/sites-available/p3x-gitlist

@@ -0,0 +1,81 @@
+server {
+    server_name git.sp.renatorosa.com git.renatorosa.com;
+    access_log /var/log/nginx/gitlist.access.log combined;
+    error_log /var/log/nginx/gitlist.error.log error;
+
+    root /var/www/p3x-gitlist/public;
+    index index.php;
+
+#   auth_basic "Restricted";
+#   auth_basic_user_file .htpasswd;
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+
+#    location ~ ^.*\.git/(HEAD|info/refs|objects/info/.*|git-(upload|receive)-pack)$ {
+#         root /var/lib/git;
+    
+#        fastcgi_pass unix:/var/run/fcgiwrap.socket;
+#        fastcgi_param SCRIPT_FILENAME   /usr/lib/git-core/git-http-backend;
+#        fastcgi_param PATH_INFO         $uri;
+#        fastcgi_param GIT_PROJECT_ROOT  /var/lib/git;
+#        include fastcgi_params;
+      #}
+    
+      # send anything else to gitweb if it's not a real file
+#      try_files $uri @gitweb;
+#      location @gitweb {
+#        fastcgi_pass unix:/var/run/fcgiwrap.socket;
+#        fastcgi_param SCRIPT_FILENAME   /usr/share/gitweb/gitweb.cgi;
+#        fastcgi_param PATH_INFO         $uri;
+#        fastcgi_param GITWEB_CONFIG     /etc/nginx/gitweb.conf;
+        include fastcgi_params;
+#      }
+#    }
+
+
+    location / {
+        try_files $uri $uri/ /index.php$request_uri;
+    }
+
+    location ~* ^/index.php.*$ {
+        ###fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+
+        # if you're using php7.2-fpm via socket
+        fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
+
+        include snippets/fastcgi-php.conf;
+    }
+
+#    location ~ \.php$ {
+#    	include      snippets/fastcgi-php.conf;
+#        fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
+#    }
+#    
+#    location ~ /\.ht {
+#     deny all;
+#    }	
+#
+#    location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
+#    add_header Vary "Accept-Encoding";
+#        expires max;
+#        try_files $uri @gitlist;
+#        tcp_nodelay off;
+#        tcp_nopush on;
+#    }
+#
+#   location ~* \.(git|svn|patch|htaccess|log|route|plist|inc|json|pl|po|sh|ini|sample|kdev4)$ {
+#       deny all;
+#   }
+
+#    location @gitlist {
+#       rewrite ^(/.*)$ /index.php$1;
+#    }
+ 
+}
+

nginx/sites-available/phpmyadmin

@@ -0,0 +1,33 @@
+server {
+    listen   80;
+    server_name phpmyadmin.sp.renatorosa.com phpmyadmin.cloud.renatorosa.com;
+ 
+    access_log /var/log/nginx/phpmyadmin_access.log;
+    error_log /var/log/nginx/phpmyadmin_error.log;
+ 
+    root   /usr/share/phpmyadmin;
+    index  index.php;
+ 
+    location / {
+        try_files $uri $uri/ @phpmyadmin;
+    }
+ 
+    location @phpmyadmin {
+        fastcgi_pass   unix:/var/run/php/php7.2-fpm.sock;
+        # If nginx running on TCP socket, comment line above and uncomment line beneath
+        #fastcgi_pass    127.0.0.1:9000;
+        include         fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /usr/share/phpmyadmin/index.php;
+        fastcgi_param SCRIPT_NAME /index.php;
+    }
+
+    location ~ \.php$ {
+        fastcgi_pass   unix:/var/run/php/php7.2-fpm.sock;
+        # If nginx running on TCP socket, comment line above and uncomment line beneath
+        #fastcgi_pass    127.0.0.1:9000;
+        include         fastcgi_params;
+        fastcgi_index  index.php;
+        fastcgi_param  SCRIPT_FILENAME  /usr/share/phpmyadmin$fastcgi_script_name;
+    }
+}
+

nginx/sites-available/sp.renatorosa.com

@@ -0,0 +1,14 @@
+server {
+        listen 80;
+        listen [::]:80;
+
+        root /var/www/default;
+        index index.php index.html index.htm index.nginx-debian.html;
+
+        server_name sp.renatorosa.com www.sp.renatorosa.com;
+
+        location / {
+                try_files $uri $uri/ =404;
+        }
+}
+