sodew-bash
This commit is contained in:
@@ -0,0 +1,52 @@
|
||||
expose_php = Off
|
||||
allow_url_fopen = Off
|
||||
allow_url_include = Off
|
||||
enable_dl = Off
|
||||
short_open_tag = Off
|
||||
|
||||
; --- block user_ini ---
|
||||
user_ini.filename =
|
||||
|
||||
; -- disable functions ---
|
||||
disable_functions = exec,passthru,shell_exec,system,proc_open,popen,putenv,dl,show_source,highlight_file,symlink,readlink,link,proc_terminate,proc_get_status,pfsockopen,posix_kill,posix_setuid,posix_setgid,posix_setsid,posix_setpgid,posix_getgrnam,posix_getpgid,posix_getpwuid,posix_getpwnam,posix_getrlimit,posix_initgroups,posix_mkfifo,posix_mknod,posix_uname,register_tick_function,openlog,syslog,proc_close,proc_nice,diskfreespace,disk_free_space,disk_total_space,leak,pcntl_alarm,pcntl_async_signals,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getcpuaffinity,pcntl_getpriority,pcntl_rfork,pcntl_setcpuaffinity,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_signal_get_handler,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_unshare,pcntl_wait,pcntl_waitid,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,sys_getloadavg
|
||||
|
||||
; not use for LSAPI
|
||||
;pm.max_children = {{children}}
|
||||
|
||||
; --- memory limit ---
|
||||
max_memory_limit = {{max_memory_limit}}
|
||||
|
||||
; --- default (redefined per vhost) ---
|
||||
memory_limit = {{memory_limit}}
|
||||
max_execution_time = {{max_execution_time}}
|
||||
max_input_time = 30
|
||||
max_input_vars = 1000
|
||||
output_buffering = 4096
|
||||
|
||||
; --- uploads ---
|
||||
post_max_size = {{post_max_size}}
|
||||
upload_max_filesize = {{upload_max_filesize}}
|
||||
max_file_uploads = 10
|
||||
|
||||
; --- log --- (to stderr k3s?)
|
||||
display_errors = Off
|
||||
log_errors = On
|
||||
;error_log = /usr/local/lsws/conf/logs/php_errors.log
|
||||
error_log = /proc/self/fd/2
|
||||
|
||||
; --- sessions (redefined per vhost) ---
|
||||
session.save_path = "/tmp"
|
||||
session.use_only_cookies = 1
|
||||
session.cookie_httponly = 1
|
||||
session.cookie_secure = 1
|
||||
session.cookie_samesite = "Lax"
|
||||
|
||||
; --- OPcache ---
|
||||
opcache.enable = 1
|
||||
opcache.enable_cli = 0
|
||||
opcache.memory_consumption = 256
|
||||
opcache.interned_strings_buffer = 16
|
||||
opcache.max_accelerated_files = 100000
|
||||
opcache.validate_timestamps = 1
|
||||
opcache.revalidate_freq = 2
|
||||
opcache.jit = "disable"
|
||||
@@ -0,0 +1,6 @@
|
||||
children=8
|
||||
max_memory_limit=512M
|
||||
memory_limit=512M
|
||||
max_execution_time=30
|
||||
post_max_size=512M
|
||||
upload_max_filesize=512M
|
||||
@@ -0,0 +1,6 @@
|
||||
children=2
|
||||
max_memory_limit=512M
|
||||
memory_limit=512M
|
||||
max_execution_time=30
|
||||
post_max_size=512M
|
||||
upload_max_filesize=512M
|
||||
@@ -0,0 +1,6 @@
|
||||
children=4
|
||||
max_memory_limit=512M
|
||||
memory_limit=512M
|
||||
max_execution_time=30
|
||||
post_max_size=512M
|
||||
upload_max_filesize=512M
|
||||
@@ -0,0 +1,6 @@
|
||||
children=6
|
||||
max_memory_limit=512M
|
||||
memory_limit=512M
|
||||
max_execution_time=30
|
||||
post_max_size=512M
|
||||
upload_max_filesize=512M
|
||||
@@ -0,0 +1,8 @@
|
||||
RewriteEngine On
|
||||
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
|
||||
|
||||
# Front-controller
|
||||
RewriteRule ^/?index\.php$ - [L]
|
||||
RewriteCond %{REQUEST_FILENAME} !-f
|
||||
RewriteCond %{REQUEST_FILENAME} !-d
|
||||
RewriteRule . /index.php [L]
|
||||
@@ -0,0 +1,11 @@
|
||||
RewriteEngine On
|
||||
|
||||
# no www -> add www + https
|
||||
RewriteCond %{HTTP_HOST} !^www\. [NC]
|
||||
RewriteRule ^ https://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
|
||||
|
||||
# www, http -> https
|
||||
RewriteCond %{HTTP:X-Forwarded-Proto} !https [NC]
|
||||
RewriteCond %{HTTP:Forwarded} !proto=https [NC]
|
||||
RewriteCond %{HTTPS} !=on
|
||||
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
|
||||
@@ -0,0 +1,11 @@
|
||||
RewriteEngine On
|
||||
|
||||
# www -> non-www + https
|
||||
RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
|
||||
RewriteRule ^ https://%1%{REQUEST_URI} [R=301,L]
|
||||
|
||||
# http -> https
|
||||
RewriteCond %{HTTP:X-Forwarded-Proto} !https [NC]
|
||||
RewriteCond %{HTTP:Forwarded} !proto=https [NC]
|
||||
RewriteCond %{HTTPS} !=on
|
||||
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
|
||||
@@ -0,0 +1,7 @@
|
||||
RewriteEngine On
|
||||
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
|
||||
|
||||
# Laravel
|
||||
RewriteRule . /public/index.php [L]
|
||||
RewriteCond %{REQUEST_FILENAME} !-d
|
||||
RewriteCond %{REQUEST_FILENAME} !-f
|
||||
@@ -0,0 +1,13 @@
|
||||
RewriteEngine On
|
||||
|
||||
RewriteCond %{DOCUMENT_ROOT}/.php81 -f
|
||||
RewriteRule ^ - [H=application/x-httpd-lsphp81]
|
||||
|
||||
RewriteCond %{DOCUMENT_ROOT}/.php82 -f
|
||||
RewriteRule ^ - [H=application/x-httpd-lsphp82]
|
||||
|
||||
RewriteCond %{DOCUMENT_ROOT}/.php83 -f
|
||||
RewriteRule ^ - [H=application/x-httpd-lsphp83]
|
||||
|
||||
RewriteCond %{DOCUMENT_ROOT}/.php84 -f
|
||||
RewriteRule ^ - [H=application/x-httpd-lsphp84]
|
||||
@@ -0,0 +1,14 @@
|
||||
RewriteEngine On
|
||||
|
||||
# Unigma 1.0.0 fix
|
||||
RewriteCond %{REQUEST_URI} ^/v(8[1-5])/ [OR]
|
||||
RewriteCond %{REQUEST_URI} ^/v(8[1-5])/router\.lua [OR]
|
||||
RewriteCond %{REQUEST_URI} ^/router\.lua
|
||||
RewriteRule ^ - [L]
|
||||
|
||||
RewriteCond %{REQUEST_URI} !^/router\.lua
|
||||
RewriteCond %{REQUEST_URI} !^/[^/]+/www/
|
||||
RewriteCond %{HTTP_HOST} ^([a-z0-9.-]+)$
|
||||
RewriteRule ^/?(.*)$ /%1/www/$1
|
||||
|
||||
RewriteRule ^/?(.*\.php)$ /router.lua?orig=/$1 [L]
|
||||
@@ -0,0 +1,46 @@
|
||||
allowSymbolLink 1
|
||||
enableScript 1
|
||||
restrained 1
|
||||
setUIDMode 2
|
||||
vhRoot /var/www/vhosts/$VH_NAME
|
||||
|
||||
virtualHostConfig {
|
||||
docRoot $VH_ROOT/www/
|
||||
vhDomain $VH_NAME
|
||||
vhAliases *.$VH_NAME
|
||||
|
||||
index {
|
||||
useServer 0
|
||||
indexFiles index.php
|
||||
}
|
||||
|
||||
phpIniOverride {
|
||||
# --- paths ---
|
||||
php_admin_value upload_tmp_dir $VH_ROOT/tmp
|
||||
php_admin_value session.save_path $VH_ROOT/session
|
||||
php_admin_value open_basedir "$VH_ROOT/www:$VH_ROOT/tmp:$VH_ROOT/session:/var/www/private/$VH_NAME:/var/www/public"
|
||||
php_admin_value auto_prepend_file /var/www/private/$VH_NAME/bootstrap.php
|
||||
|
||||
# --- hard limits ---
|
||||
php_admin_value memory_limit 512M
|
||||
php_admin_value max_execution_time 30
|
||||
php_admin_value max_input_time 30
|
||||
php_admin_value max_input_vars 1000
|
||||
php_admin_value post_max_size 128M
|
||||
php_admin_value upload_max_filesize 128M
|
||||
}
|
||||
|
||||
rewrite {
|
||||
enable 1
|
||||
autoLoadHtaccess 1
|
||||
rules <<<END_rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/php.rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/https.rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/front-controller.rules
|
||||
END_rules
|
||||
}
|
||||
|
||||
accessControl {
|
||||
allow 127.0.0.1, ::1, 10.42.0.0/16, 10.43.0.0/16
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
docRoot /var/www/vhosts/{{domain}}/www/
|
||||
vhDomain {{domain}}
|
||||
vhAliases *.{{domain}}
|
||||
|
||||
index {
|
||||
useServer 0
|
||||
indexFiles index.php
|
||||
}
|
||||
|
||||
phpIniOverride {
|
||||
# --- paths ---
|
||||
php_admin_value upload_tmp_dir /var/www/vhosts/{{domain}}/tmp
|
||||
php_admin_value session.save_path /var/www/vhosts/{{domain}}/session
|
||||
php_admin_value open_basedir "/var/www/vhosts/{{domain}}/www:/var/www/vhosts/{{domain}}/tmp:/var/www/vhosts/{{domain}}/session:/var/www/data/{{domain}}:/var/www/shared"
|
||||
php_admin_value auto_prepend_file /var/www/data/{{domain}}/bootstrap.php
|
||||
|
||||
# --- hard limits ---
|
||||
php_admin_value memory_limit {{memory_limit}}
|
||||
php_admin_value max_execution_time {{max_execution_time}}
|
||||
php_admin_value max_input_time 30
|
||||
php_admin_value max_input_vars 1000
|
||||
php_admin_value post_max_size {{post_max_size}}
|
||||
php_admin_value upload_max_filesize {{upload_max_filesize}}
|
||||
}
|
||||
|
||||
rewrite {
|
||||
enable 1
|
||||
autoLoadHtaccess 1
|
||||
rules <<<END_rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/php.rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/https.rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/front-controller.rules
|
||||
END_rules
|
||||
}
|
||||
|
||||
accessControl {
|
||||
allow 127.0.0.1, ::1, 10.42.0.0/16, 10.43.0.0/16
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
docRoot $VH_ROOT/www/
|
||||
vhDomain $VH_NAME
|
||||
vhAliases *.$VH_NAME
|
||||
|
||||
index {
|
||||
useServer 0
|
||||
indexFiles index.php
|
||||
}
|
||||
|
||||
phpIniOverride {
|
||||
# --- paths ---
|
||||
php_admin_value upload_tmp_dir $VH_ROOT/tmp
|
||||
php_admin_value session.save_path $VH_ROOT/session
|
||||
php_admin_value open_basedir "$VH_ROOT/www:$VH_ROOT/tmp:$VH_ROOT/session:/var/www/private/$VH_NAME:/var/www/public"
|
||||
php_admin_value auto_prepend_file /var/www/private/$VH_NAME/bootstrap.php
|
||||
|
||||
# --- hard limits ---
|
||||
php_admin_value memory_limit {{memory_limit}}
|
||||
php_admin_value max_execution_time {{max_execution_time}}
|
||||
php_admin_value max_input_time 30
|
||||
php_admin_value max_input_vars 1000
|
||||
php_admin_value post_max_size {{post_max_size}}
|
||||
php_admin_value upload_max_filesize {{upload_max_filesize}}
|
||||
}
|
||||
|
||||
rewrite {
|
||||
enable 1
|
||||
autoLoadHtaccess 1
|
||||
rules <<<END_rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/php.rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/https.rules
|
||||
rewriteFile /usr/local/lsws/conf/rules/front-controller.rules
|
||||
END_rules
|
||||
}
|
||||
|
||||
accessControl {
|
||||
allow 127.0.0.1, ::1, 10.42.0.0/16, 10.43.0.0/16
|
||||
}
|
||||
Reference in New Issue
Block a user