| Server IP : 92.204.138.22 / Your IP : 3.139.108.37 Web Server : Apache System : Linux ns1009439.ip-92-204-138.us 4.18.0-553.8.1.el8_10.x86_64 #1 SMP Tue Jul 2 07:26:33 EDT 2024 x86_64 User : internationaljou ( 1019) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /proc/self/root/etc/nginx/ea-nginx/ |
Upload File : |
server {
server_name[% FOREACH domain IN domains %] [% domain %][% END %][% IF ip %] [% ip %][% END %];
listen 80;
[% IF !ipv6 %]# server does not have IPv6 enabled: [% END %]listen [::]:80;
[%- IF secruleengineoff %]
modsecurity off;
[% END -%]
[%- IF uid %]
set $USER_ID [% uid %];
[% END -%]
[%- IF !logging.piped_logs %]
access_log /var/log/nginx/domains/[% domains.0 %] cp_combined;
access_log /var/log/nginx/domains/[% domains.0 %]-bytes_log cp_bytes_server;
[% END -%]
include conf.d/includes-optional/cloudflare.conf;
set $CPANEL_APACHE_PROXY_PASS $scheme://apache_backend_${scheme}_[% proxy_ip ? proxy_ip.replace("\\.", "_") : settings.apache_port_ip.replace("\\.", "_") %];
# For includes:
set $CPANEL_APACHE_PROXY_IP [% proxy_ip || settings.apache_port_ip %];
set $CPANEL_APACHE_PROXY_SSL_IP [% proxy_ip || settings.apache_port_ip %];
set $CPANEL_SERVICE_SUBDOMAIN 0;
[%- IF behavior.caching.enabled %]
set $CPANEL_PROXY_CACHE [% user %];
set $CPANEL_SKIP_PROXY_CACHING 0;
[% END -%]
[%- IF ssl_certificate && ssl_certificate_key %]
[%- IF behavior.standalone %]
[%- IF ssl_redirect %]
location ~ ^/(?!(?:\.well-known/(?:pki-validation|cpanel-dcv))) {
if ($scheme = http) {
return 301 https://$host$request_uri;
}
}
[% END -%]
[% END -%]
listen 443 ssl;
[% IF !ipv6 %]# server does not have IPv6 enabled: [% END %]listen [::]:443 ssl;
http2 [% http2 ? "on" : "off" %];
ssl_certificate [% ssl_certificate %];
ssl_certificate_key [% ssl_certificate_key %];
[% IF ea4conf.sslprotocol_list_str || ea4conf.sslprotocol %]
ssl_protocols [% ea4conf.sslprotocol_list_str || ea4conf.sslprotocol %];
proxy_ssl_protocols [% ea4conf.sslprotocol_list_str || ea4conf.sslprotocol %];
[%- END -%]
[%- IF ea4conf.sslciphersuite %]
ssl_prefer_server_ciphers on;
ssl_ciphers [% ea4conf.sslciphersuite %];
proxy_ssl_ciphers [% ea4conf.sslciphersuite %];
[% END -%]
[% END -%]
root "[% docroot %]";
location /cpanelwebcall {
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass http://127.0.0.1:2082/cpanelwebcall;
}
location /Microsoft-Server-ActiveSync {
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass http://127.0.0.1:2090/Microsoft-Server-ActiveSync;
}
location = /favicon.ico {
allow all;
log_not_found off;
access_log off;
[%- IF !behavior.standalone %]
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass $CPANEL_APACHE_PROXY_PASS;
[%- END %]
}
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
[%- IF !behavior.standalone %]
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass $CPANEL_APACHE_PROXY_PASS;
[%- END %]
}
[%- IF !behavior.standalone %]
location / {
[%- IF behavior.caching.enabled %]
[%- IF basic_auth.realm_name.size %]
# has basic auth, so disable cache:
proxy_cache off;
proxy_no_cache 1;
proxy_cache_bypass 1;
[%- ELSE %]
proxy_cache $CPANEL_PROXY_CACHE;
proxy_no_cache $CPANEL_SKIP_PROXY_CACHING;
proxy_cache_bypass $CPANEL_SKIP_PROXY_CACHING;
[%- END %]
[%- FOREACH cache_valid IN behavior.caching.proxy_cache_valid.keys.sort %]
proxy_cache_valid [% cache_valid %] [% behavior.caching.proxy_cache_valid.$cache_valid %];
[%- END %]
proxy_cache_use_stale [% behavior.caching.proxy_cache_use_stale %];
proxy_cache_background_update [% behavior.caching.proxy_cache_background_update %];
proxy_cache_revalidate [% behavior.caching.proxy_cache_revalidate %];
proxy_cache_min_uses [% behavior.caching.proxy_cache_min_uses %];
proxy_cache_lock [% behavior.caching.proxy_cache_lock %];
[%- IF behavior.caching.x_cache_header %]
add_header X-Cache $upstream_cache_status;
[%- END %]
[%- END %]
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass $CPANEL_APACHE_PROXY_PASS;
}
[%- IF has_wordpress %]
if ( $http_cookie ~ "wordpress_logged_in_[a-zA-Z0-9]+" ) {
set $CPANEL_PROXY_CACHE off;
set $CPANEL_SKIP_PROXY_CACHING 1;
}
[% END -%]
[%- IF basic_auth.locations %]
[%- FOREACH location IN basic_auth.locations.keys.sort %]
location "[% location.dquote %]" {
# has basic auth, so disable cache:
proxy_cache off;
proxy_no_cache 1;
proxy_cache_bypass 1;
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass $CPANEL_APACHE_PROXY_PASS;
}
[% END -%]
[% END -%]
[% ELSE -%]
[%- FOREACH redirect IN redirects %]
rewrite [% redirect.regex %] [% redirect.replacement %] [% redirect.flag %];
[%- END %]
index [% IF fpm_socket %]index.php [% END %]index.html;
[%- IF basic_auth.realm_name.size %]
[% INCLUDE "ea-nginx/cpanel-password-protected-dirs.tt"
realm_name = basic_auth.realm_name
auth_file = basic_auth.auth_file
FILTER indent %]
[% END -%]
location = /FPM_50x.html {
root /etc/nginx/ea-nginx/html;
}
[%- IF wordpress.docroot_install %]
# $docroot wordpress install
location / {
[% INCLUDE "ea-nginx/cpanel-wordpress-location.tt" -%]
[% INCLUDE "ea-nginx/cpanel-php-location.tt" FILTER indent FILTER indent -%]
include conf.d/includes-optional/cpanel-cgi-location.conf;
include conf.d/includes-optional/cpanel-server-parsed-location.conf;
}
[% END -%]
[%- FOREACH wordpress_uri IN wordpress.non_docroot_uris %]
# $docroot/[% wordpress_uri %] wordpress install
location /[% wordpress_uri %] {
[%- FOREACH location IN basic_auth.locations.keys.sort %]
[%- IF location == "/" _ wordpress_uri %]
[%- INCLUDE "ea-nginx/cpanel-password-protected-dirs.tt"
realm_name = basic_auth.locations.item(location).realm_name
auth_file = basic_auth.locations.item(location).auth_file
FILTER indent FILTER indent -%]
[%- basic_auth.locations.delete(location) -%]
[% END -%]
[% END -%]
[% INCLUDE "ea-nginx/cpanel-wordpress-location.tt" -%]
[% INCLUDE "ea-nginx/cpanel-php-location.tt" FILTER indent FILTER indent -%]
include conf.d/includes-optional/cpanel-cgi-location.conf;
include conf.d/includes-optional/cpanel-server-parsed-location.conf;
}
[% END -%]
[%- IF basic_auth.locations %]
[%- FOREACH location IN basic_auth.locations.keys.sort %]
location "[% location.dquote %]" {
[%- INCLUDE "ea-nginx/cpanel-password-protected-dirs.tt"
realm_name = basic_auth.locations.item(location).realm_name
auth_file = basic_auth.locations.item(location).auth_file
FILTER indent FILTER indent -%]
[%- INCLUDE "ea-nginx/cpanel-php-location.tt" FILTER indent FILTER indent -%]
include conf.d/includes-optional/cpanel-cgi-location.conf;
include conf.d/includes-optional/cpanel-server-parsed-location.conf;
}
[% END -%]
[% END -%]
[%- IF passenger.apps.size %]
[%- FOREACH app IN passenger.apps %]
location "[% app.base_uri.dquote %]" {
[%- IF app.envvars.size %]
[%- FOREACH name IN app.envvars.keys.sort %]
passenger_env_var [% name %] "[% app.envvars.$name.dquote %]";
[%- END %]
[% END -%]
passenger_user [% user %];
passenger_group [% group %];
passenger_app_env [% app.deployment_mode %];
passenger_enabled on;
passenger_base_uri [% app.base_uri %];
passenger_app_root "[% app.path.dquote %]";
passenger_app_group_name "[% user _ ' - ' _ app.name.dquote %]";
[%- IF app.ruby %]
passenger_ruby [% app.ruby %];
[%- END %]
[%- IF app.python %]
passenger_python [% app.python %];
[%- END %]
[%- IF app.nodejs %]
passenger_nodejs [% app.nodejs %];
[%- END %]
allow all; # `Allow from all` && newer `Require all granted`
autoindex off; # `Options -Indexes` (nginx does not do `MultiViews` so no need for equivalent `Options -MultiViews`)
}
[% END -%]
[% END -%]
include conf.d/server-includes-standalone/*.conf;
[% END -%]
include conf.d/server-includes/*.conf;
include conf.d/users/[% user %]/*.conf;
include conf.d/users/[% user %]/[% domains.0.replace('^\*\.', '_wildcard_.') %]/*.conf;
[%- IF behavior.standalone %]
[%- INCLUDE "ea-nginx/cpanel-php-location.tt" FILTER indent -%]
include conf.d/includes-optional/cpanel-cgi-location.conf;
include conf.d/includes-optional/cpanel-server-parsed-location.conf;
[% END -%]
}
[%- IF ssl_certificate && ssl_certificate_key && proxysubdomains_enabled && service_subdomains.size %]
server {
listen 80;
[% IF !ipv6 %]# server does not have IPv6 enabled: [% END %]listen [::]:80;
listen 443 ssl;
[% IF !ipv6 %]# server does not have IPv6 enabled: [% END %]listen [::]:443 ssl;
http2 [% http2 ? "on" : "off" %];
ssl_certificate [% ssl_certificate %];
ssl_certificate_key [% ssl_certificate_key %];
server_name [% FOREACH svc_sub IN service_subdomains %] [% svc_sub %][% END %];
[%- IF secruleengineoff %]
modsecurity off;
[% END -%]
[%- IF uid %]
set $USER_ID [% uid %];
[% END -%]
include conf.d/includes-optional/cloudflare.conf;
set $CPANEL_APACHE_PROXY_PASS $scheme://apache_backend_${scheme}_[% proxy_ip ? proxy_ip.replace("\\.", "_") : settings.apache_port_ip.replace("\\.", "_") %];
# For includes:
set $CPANEL_APACHE_PROXY_IP [% proxy_ip || settings.apache_port_ip %];
set $CPANEL_APACHE_PROXY_SSL_IP [% proxy_ip || settings.apache_port_ip %];
set $CPANEL_SERVICE_SUBDOMAIN 1;
location /.well-known/cpanel-dcv {
root "[% docroot %]";
disable_symlinks if_not_owner;
[%- IF !behavior.standalone %]
# pass to Apache
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass $CPANEL_APACHE_PROXY_PASS;
[%- END %]
}
location /.well-known/pki-validation {
root "[% docroot %]";
disable_symlinks if_not_owner;
[%- IF !behavior.standalone %]
# pass to Apache
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass $CPANEL_APACHE_PROXY_PASS;
[%- END %]
}
location /.well-known/acme-challenge {
root "[% docroot %]";
disable_symlinks if_not_owner;
[%- IF !behavior.standalone %]
# pass to Apache
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass $CPANEL_APACHE_PROXY_PASS;
[%- END %]
}
location / {
# Force https for service subdomains
if ($scheme = http) {
return 301 https://$host$request_uri;
}
# no cache
proxy_cache off;
proxy_no_cache 1;
proxy_cache_bypass 1;
# pass to Apache
include conf.d/includes-optional/cpanel-proxy.conf;
proxy_pass $CPANEL_APACHE_PROXY_PASS;
}
}
[%- END %]