Update default.conf

Author: hsntgm

nginx/default.conf

@@ -6,35 +6,53 @@
 # ----------------------------------------------------------------------------     #
 
 # FastCGI Cache Path
-####################
+#####################
 fastcgi_cache_path /var/cache/nginx levels=1:2 keys_zone=NPP:100m max_size=400m inactive=30d;
-####################
+#####################
 
 server {
     # Listen HTTP
-    ##################################
+    #################
     listen 80;
     server_name localhost;
 
     # HTTPS Redirect
-    ##################################
+    #################
     location / {
         rewrite ^ https://$host$request_uri? permanent;
     }
 }
 
 server {
     # Listen HTTPS
-    ##################################
+    #################
     listen 443 ssl;
     server_name localhost;
 
-    # Document root
-    ###############
+    # phpMyAdmin Reverse Proxy
+    #################
+    location = /phpmyadmin {
+        return 301 $scheme://$host/phpmyadmin/;
+    }
+
+    location  ~ \/phpmyadmin {
+        rewrite ^/phpmyadmin(/.*)$ $1 break;
+        proxy_set_header Host               $host;
+        proxy_set_header X-Forwarded-Scheme $scheme;
+        proxy_set_header X-Forwarded-Proto  $scheme;
+        proxy_set_header X-Forwarded-For    $remote_addr;
+        proxy_set_header X-Real-IP          $remote_addr;
+        proxy_pass       http://phpmyadmin:80;
+    }
+    # End
+    #####
+
+    # WP Document root
+    #################
     root /var/www/html;
     index index.php index.html index.htm;
 
-    # Cache Settings
+    # FCGI Cache Settings
     #################
     set $skip_cache 0;
 
@@ -61,7 +79,7 @@ server {
     #####
 
     # Stop Nginx from logging
-    #########################
+    #################
     location = /favicon.ico {
         log_not_found off;
         access_log off;
@@ -75,16 +93,16 @@ server {
     # End
     #####
 
-    # Serve content
-    ##################
+    # Serve WP content
+    #################
     location / {
         try_files $uri $uri/ /index.php$is_args$args;
     }
     # End
     #####
 
     # PHP-FPM Configuration
-    ################
+    #################
     location ~ \.php$ {
         # Use NPP "Cache Key Regex" option for non-default structers
         # This structer supported in default by NPP
@@ -107,47 +125,47 @@ server {
     # End
     #####
 
-    # WP Security Settings
-    #######################
+    # WP Security Settings (Enable on Production)
+    #################
     # Deny access to hidden files and directories (except .well-known)
-    location ~ /\.(?!well-known/) {
-        deny all;
-    }
+    # location ~ /\.(?!well-known/) {
+    #     deny all;
+    # }
 
     # Deny access to wp-config files and other critical files
-    location ~* ^/(?:wp-config\.php|wp-config-sample\.php|readme\.html|license\.txt)$ {
-        deny all;
-    }
+    # location ~* ^/(?:wp-config\.php|wp-config-sample\.php|readme\.html|license\.txt)$ {
+    #     deny all;
+    # }
 
     # Deny access to PHP files in uploads, files, plugins, themes
-    location ~* /(?:uploads|files|wp-content|wp-includes)/.*\.php$ {
-        deny all;
-    }
+    # location ~* /(?:uploads|files|wp-content|wp-includes)/.*\.php$ {
+    #     deny all;
+    # }
 
     # Deny access to script file types
-    location ~* .(pl|cgi|py|sh|lua|asp)$ {
-        deny all;
-    }
+    # location ~* .(pl|cgi|py|sh|lua|asp)$ {
+    #     deny all;
+    # }
 
     # Block access to wp-content plugin/theme log files
-    location ~* ^/wp-content/(plugins|themes)/.*\.(txt|log|md)$ {
-        deny all;
-    }
+    # location ~* ^/wp-content/(plugins|themes)/.*\.(txt|log|md)$ {
+    #     deny all;
+    # }
 
     # Block common attack patterns
-    location ~* "(eval\(.*\)|base64_encode\(.*\)|\{0\}|phpinfo|self/environ)" {
-        deny all;
-    }
+    # location ~* "(eval\(.*\)|base64_encode\(.*\)|\{0\}|phpinfo|self/environ)" {
+    #     deny all;
+    # }
 
     # Block dangerous file access
-    location ~* "/(thumb|timthumb|config|settings|sqlpatch|webshell|phpinfo)\.php" {
-        deny all;
-    }
+    # location ~* "/(thumb|timthumb|config|settings|sqlpatch|webshell|phpinfo)\.php" {
+    #     deny all;
+    # }
     # End
     #####
 
     # Browser Cache (Enable on Production)
-    ###############
+    #################
     # location ~*.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|css|rss|atom|js|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
     #    expires max;
     #    log_not_found off;
@@ -165,7 +183,7 @@ server {
     #####
 
     # SSL Settings (Enable on Production)
-    ##############
+    #################
     # ssl_protocols TLSv1.2 TLSv1.3;
     # ssl_prefer_server_ciphers on;
     # ssl_ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS;
@@ -178,7 +196,7 @@ server {
     #####
 
     # Security Headers (Enable on Production)
-    ##################
+    #################
     # add_header Content-Security-Policy upgrade-insecure-requests;
     # add_header Permissions-Policy "microphone=(), camera=(), interest-cohort=(), browsing-topics=()";
     # add_header Referrer-Policy no-referrer-when-downgrade;
@@ -190,7 +208,7 @@ server {
     #####
 
     # FastCGI Cache Status Header
-    #############################
+    #################
     add_header NPP-FastCGI-Cache $upstream_cache_status;
-    #############################
+    #################
 }