bachir/alpine-web-werver
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix vhost: user perms, ssl cache param

Browse Source
This commit is contained in:
bachir
2019-04-20 17:12:19 +02:00
parent d9a2023b2b
commit 239cba9820
3 changed files with 11 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
assets/vhosts/drupal-ssl.nginxconf
+1 -1
View File
@@ -19,7 +19,7 @@ server {
ssl_certificate "/etc/letsencrypt/live/DOMAIN.LTD/fullchain.pem"; ssl_certificate "/etc/letsencrypt/live/DOMAIN.LTD/fullchain.pem";
ssl_certificate_key "/etc/letsencrypt/live/DOMAIN.LTD/privkey.pem"; ssl_certificate_key "/etc/letsencrypt/live/DOMAIN.LTD/privkey.pem";
ssl_dhparam /etc/nginx/ssl/certs/DOMAIN.LTD/dhparam.pem; ssl_dhparam /etc/nginx/ssl/certs/DOMAIN.LTD/dhparam.pem;
ssl_session_cache shared:SSL:1m; # ssl_session_cache shared:SSL:1m;
ssl_session_timeout 10m; ssl_session_timeout 10m;
ssl_ciphers HIGH:!aNULL:!MD5; ssl_ciphers HIGH:!aNULL:!MD5;
#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5; #ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
assets/vhosts/simple-phpfpm-ssl.nginxconf
+1 -1
View File
@@ -36,7 +36,7 @@ server {
ssl_certificate "/etc/letsencrypt/live/DOMAIN.LTD/fullchain.pem"; ssl_certificate "/etc/letsencrypt/live/DOMAIN.LTD/fullchain.pem";
ssl_certificate_key "/etc/letsencrypt/live/DOMAIN.LTD/privkey.pem"; ssl_certificate_key "/etc/letsencrypt/live/DOMAIN.LTD/privkey.pem";
ssl_dhparam /etc/nginx/ssl/certs/DOMAIN.LTD/dhparam.pem; ssl_dhparam /etc/nginx/ssl/certs/DOMAIN.LTD/dhparam.pem;
ssl_session_cache shared:SSL:1m; # ssl_session_cache shared:SSL:1m;
ssl_session_timeout 10m; ssl_session_timeout 10m;
ssl_ciphers HIGH:!aNULL:!MD5; ssl_ciphers HIGH:!aNULL:!MD5;
#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5; #ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
bin/vhost.sh
+9 -8
View File
@@ -94,11 +94,9 @@ cp "$_assets/vhosts/index.php" /var/www/"$_domain"/app/public_html/
sed -i -r "s/DOMAIN\.LTD/$_domain/g" /var/www/"$_domain"/app/public_html/index.php sed -i -r "s/DOMAIN\.LTD/$_domain/g" /var/www/"$_domain"/app/public_html/index.php
#set proper right to user will handle the app #set proper right to user will handle the app
chown -R root:admin /var/www/"$_domain"/ chown -R www:www /var/www/"$_domain"/
chmod -R g+w /var/www/"$_domain"/ # chmod -R g+w /var/www/"$_domain"/
chmod -R g+r /var/www/"$_domain"/ # chmod -R g+r /var/www/"$_domain"/
# create a shortcut to the site # create a shortcut to the site
echo -n "Should we install a shortcut for a user? [Y|n] " echo -n "Should we install a shortcut for a user? [Y|n] "
@@ -130,16 +128,19 @@ if [ "$yn" = "Y" ] || [ "$yn" = "y" ]; then
echo -e "installing shortcut for '$user'"; echo -e "installing shortcut for '$user'";
mkdir /home/"$user"/www/ mkdir /home/"$user"/www/
chown "$user":admin /home/"$user"/www/ chown "$user":"$user" /home/"$user"/www/
ln -s /var/www/"$_domain" /home/"$user"/www/"$_domain" ln -s /var/www/"$_domain" /home/"$user"/www/"$_domain"
chown "$user":admin /home/"$user"/www/"$_domain" chown "$user":"$user" /home/"$user"/www/"$_domain"
chown -R www:"$user" /home/"$user"/www/"$_domain"/app
chmod -R g+rw /home/"$user"/www/"$_domain"/app
else else
echo -e 'no shortcut installed' echo -e 'no shortcut installed'
fi fi
# activate the vhost # activate the vhost
# ln -s /etc/nginx/sites-available/"$_domain".conf /etc/nginx/sites-enabled/"$_domain".conf # ln -s /etc/nginx/sites-available/"$_domain".conf /etc/nginx/sites-enabled/"$_domain".conf
nginx -t
# restart nginx # restart nginx
service nginx start service nginx start
echo -e "vhost $_domain configured" echo -e "vhost $_domain configured"