From dab3fd4a501df5c3fc30b4c9fe79bfada4415958 Mon Sep 17 00:00:00 2001 From: Yaco Date: Sun, 6 Jan 2019 00:20:37 -0300 Subject: grandes avances previos al primer deployment en reevo.wiki --- etc/global_config.php.sample | 28 +++++++++++++++++ etc/nginx/crm.conf.sample | 44 ++++++++++++++++++++++++++ etc/nginx/global.conf.sample | 28 +++++++++++++++++ etc/nginx/wiki.conf.sample | 74 ++++++++++++++++++++++++++++++++++++++++++++ etc/php-fpm/crm.conf.sample | 61 ++++++++++++++++++++++++++++++++++++ etc/php-fpm/wiki.conf.sample | 60 +++++++++++++++++++++++++++++++++++ 6 files changed, 295 insertions(+) create mode 100755 etc/global_config.php.sample create mode 100755 etc/nginx/crm.conf.sample create mode 100755 etc/nginx/global.conf.sample create mode 100755 etc/nginx/wiki.conf.sample create mode 100755 etc/php-fpm/crm.conf.sample create mode 100755 etc/php-fpm/wiki.conf.sample (limited to 'etc') diff --git a/etc/global_config.php.sample b/etc/global_config.php.sample new file mode 100755 index 00000000..68764962 --- /dev/null +++ b/etc/global_config.php.sample @@ -0,0 +1,28 @@ + diff --git a/etc/nginx/crm.conf.sample b/etc/nginx/crm.conf.sample new file mode 100755 index 00000000..0387c39f --- /dev/null +++ b/etc/nginx/crm.conf.sample @@ -0,0 +1,44 @@ +# ---- +# Copyright (C) 2013-2020 - Reevo (http://reevo.org) +# License: Affero GPL version 3 - http://www.gnu.org/licenses/agpl.html +# ES: Este archivos es parte de: reevo-web (http://git.reevo.org/reevo/reevo-2020) +# EN: This file is part of: reevo-2020 (http://git.reevo.org/reevo/reevo-2020) +# ---- + +server { + server_name crm.example.org example.org; + root /srv/reevo-web/www/crm; + + access_log /srv/reevo-web/log/crm/nginx.access.log; + error_log /srv/reevo-web/log/crm/nginx.error.log warn; + + index index.html index.htm index.php; + + location ~ \.php$ { + # Sitio offline + if ($maintenance) { return 503; } + + # Bloquea bots + if ($limit_bots) { add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive"; } + + include /etc/nginx/fastcgi_params; + fastcgi_pass unix:/srv/reevo-web/run/crm.socket; + fastcgi_index index.php; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + } + + add_header Access-Control-Allow-Origin *; + rewrite /wp-admin$ $scheme://$host$uri/ permanent; + try_files $uri $uri/ /index.php?$args; + + error_page 503 @maintenance; + location @maintenance { + rewrite ^(.*)$ /errors/503/index.html break; + } + + location /wp-content/plugins/files/civicrm/ { + deny all; + return 404; + } + +} diff --git a/etc/nginx/global.conf.sample b/etc/nginx/global.conf.sample new file mode 100755 index 00000000..94a501d4 --- /dev/null +++ b/etc/nginx/global.conf.sample @@ -0,0 +1,28 @@ +# ---- +# Copyright (C) 2013-2020 - Reevo (http://reevo.org) +# License: Affero GPL version 3 - http://www.gnu.org/licenses/agpl.html +# ES: Este archivos es parte de: reevo-web (http://git.reevo.org/reevo/reevo-2020) +# EN: This file is part of: reevo-2020 (http://git.reevo.org/reevo/reevo-2020) +# ---- + +## ES: Modo mantenimiento +## EN: Maintance mode +geo $maintenance { + + # ES: cambiar a 1 para entrar en modo mantenimiento + # EN: change to 1 to enable maintance mode + default 0; + + # ES: listado de IP's con acceso cuando se está en modo mantenimiento + # EN: list of allowd IPs in MM + # 192.168.56.1 0; # IP en contexto de VM +} + +## ES: No indexar en buscadores +## EN: Avoid indexing by search engines +map $http_user_agent $limit_bots { + + # ES: cambiar a 1 para evitar que los sitios sean indexados + # EN: change to 1 to avoid indexing + default 0; +} diff --git a/etc/nginx/wiki.conf.sample b/etc/nginx/wiki.conf.sample new file mode 100755 index 00000000..fbb036fa --- /dev/null +++ b/etc/nginx/wiki.conf.sample @@ -0,0 +1,74 @@ +# ---- +# Copyright (C) 2013-2020 - Reevo (http://reevo.org) +# License: Affero GPL version 3 - http://www.gnu.org/licenses/agpl.html +# ES: Este archivos es parte de: reevo-web (http://git.reevo.org/reevo/reevo-2020) +# EN: This file is part of: reevo-2020 (http://git.reevo.org/reevo/reevo-2020) +# ---- + +server { + server_name wiki.example.org; + root /srv/reevo-2020/www/wiki; + + index index.php; + + access_log /srv/reevo-2020/log/wiki/nginx.access.log; + error_log /srv/reevo-2020/log/wiki/nginx.error.log; + + if ($request_method !~ ^(GET|HEAD|POST)$) { + return 405; + } + + # Force static locations + location = /favicon.ico { + expires +1y; + } + + # Forbid access to files starting with . + location ~ /\. { + access_log off; + log_not_found off; + deny all; + } + + # Prevent access to internal URIs + location ^~ /(bin|docs|extensions|includes|maintenance|resources|serialized|tests)/ { + internal; + } + + ## Uncomment after install + # location ^~ /mw-config/ { internal; } + + # Prevent non-images in /images + location ~* /images/.*\.[^\\/:*?\x22<>|%]+(#|\?|$) { + types { } + default_type text/plain; + } + + location / { + # Sitio offline + if ($maintenance) { return 503; } + + # Bloquea bots + if ($limit_bots) { add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive"; } + + try_files $uri $uri/ =404; + error_page 404 = @mediawiki; + error_page 503 = @maintenance; + } + + location @maintenance { + # Sitio offline + rewrite ^(.*)$ /errors/503/index.html break; + } + + location @mediawiki { + rewrite ^/(.*)$ /index.php?title=$1&$args last; + } + + location ~ \.php$ { + fastcgi_pass unix:/srv/reevo-2020/run/wiki.socket; + include /etc/nginx/fastcgi_params; + fastcgi_index index.php; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + } +} diff --git a/etc/php-fpm/crm.conf.sample b/etc/php-fpm/crm.conf.sample new file mode 100755 index 00000000..b5bd53c2 --- /dev/null +++ b/etc/php-fpm/crm.conf.sample @@ -0,0 +1,61 @@ +# ---- +# Copyright (C) 2013-2020 - Reevo (http://reevo.org) +# License: Affero GPL version 3 - http://www.gnu.org/licenses/agpl.html +# ES: Este archivos es parte de: reevo-2020 (http://git.reevo.org/reevo/reevo-2020) +# EN: This file is part of: reevo-2020 (http://git.reevo.org/reevo/reevo-2020) +# ---- + +[blog] + +user = reevo +group = www-data + +listen = /srv/reevo-2020/run/$pool.socket +access.log = /srv/reevo-2020/log/$pool/php_fpm-$pool.access.log +slowlog = /srv/reevo-2020/log/$pool/php_fpm-$pool.slow.log + +listen.owner = reevo +listen.group = www-data +listen.mode = 0660 + +listen.allowed_clients = 127.0.0.1 + +pm = dynamic +pm.max_children = 50 +pm.start_servers = 10 +pm.min_spare_servers = 5 +pm.max_spare_servers = 30 +pm.status_path = /.status + +ping.path = /.ping +ping.response = pong $pool.example.org + +request_slowlog_timeout = 10 +request_terminate_timeout = 10m +rlimit_files = 1024 +rlimit_core = 0 + +chdir = /srv/reevo-2020/www/$pool + +catch_workers_output = yes + +security.limit_extensions = .php .jpg .png .js .css + +env[HOSTNAME] = $pool.example.org +env[TMP] = /srv/reevo-2020/tmp/$pool +env[TMPDIR] = /srv/reevo-2020/tmp/$pool +env[TEMP] = /srv/reevo-2020/tmp/$pool + +php_flag[display_errors] = on +php_admin_value[error_log] = /srv/reevo-2020/log/$pool/php_fpm-$pool.error.log +php_admin_flag[log_errors] = on +php_admin_value[memory_limit] = 64M + +; upload limits +php_admin_value[post_max_size] = 12M +php_admin_value[upload_max_filesize] = 10M + +php_admin_value[session.cookie_domain] = .example.org +php_admin_value[session.save_path] = /srv/reevo-2020/tmp/$pool + +php_admin_value[cgi.fix_pathinfo] = 1 diff --git a/etc/php-fpm/wiki.conf.sample b/etc/php-fpm/wiki.conf.sample new file mode 100755 index 00000000..d6b853da --- /dev/null +++ b/etc/php-fpm/wiki.conf.sample @@ -0,0 +1,60 @@ +# ---- +# Copyright (C) 2013-2020 - Reevo (http://reevo.org) +# License: Affero GPL version 3 - http://www.gnu.org/licenses/agpl.html +# ES: Este archivos es parte de: reevo-2020 (http://git.reevo.org/reevo/reevo-2020) +# EN: This file is part of: reevo-2020 (http://git.reevo.org/reevo/reevo-2020) +# ---- + +[wiki] + +user = reevo +group = www-data + +listen = /srv/reevo-2020/run/$pool.socket +access.log = /srv/reevo-2020/log/$pool/php_fpm-$pool.access.log +slowlog = /srv/reevo-2020/log/$pool/php_fpm-$pool.slow.log + +listen.owner = reevo +listen.group = www-data +listen.mode = 0660 + +listen.allowed_clients = 127.0.0.1 + +pm = dynamic +pm.max_children = 50 +pm.start_servers = 10 +pm.min_spare_servers = 5 +pm.max_spare_servers = 30 +pm.status_path = /.status + +ping.path = /.ping +ping.response = pong $pool.example.org + +request_slowlog_timeout = 10 +request_terminate_timeout = 10m +rlimit_files = 1024 +rlimit_core = 0 + +chdir = /srv/reevo-2020/www/$pool + +catch_workers_output = yes + +security.limit_extensions = .php .jpg .png .js .css + +env[HOSTNAME] = $pool.example.org +env[TMP] = /srv/reevo-2020/tmp/$pool +env[TMPDIR] = /srv/reevo-2020/tmp/$pool +env[TEMP] = /srv/reevo-2020/tmp/$pool + +php_flag[display_errors] = on +php_admin_value[error_log] = /srv/reevo-2020/log/$pool/php_fpm-$pool.error.log +php_admin_flag[log_errors] = on +php_admin_value[memory_limit] = 64M + +; upload limits +php_admin_value[post_max_size] = 12M +php_admin_value[upload_max_filesize] = 10M + +php_admin_value[session.cookie_domain] = .example.org + +php_admin_value[cgi.fix_pathinfo] = 1 -- cgit v1.2.1