github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-19 13:01:52 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Adding latest nginx support with symlink protection

Browse source
This commit is contained in:
Serghey Rodin 2013-04-01 22:42:07 +03:00
commit 64877c5b65
2 changed files with 23 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

5
install/0.9.7/rhel/nginx.conf
View file

@ -55,6 +55,9 @@ http {
gzip_proxied any; gzip_proxied any;
# Symlinks protection
disable_symlinks if_not_owner;
# Proxy settings # Proxy settings
proxy_redirect off; proxy_redirect off;
proxy_set_header Host $host; proxy_set_header Host $host;
@ -66,11 +69,13 @@ http {
proxy_read_timeout 90; proxy_read_timeout 90;
proxy_buffers 32 4k; proxy_buffers 32 4k;
# SSL PCI Compliance # SSL PCI Compliance
ssl_ciphers RC4:HIGH:!aNULL:!MD5:!kEDH; ssl_ciphers RC4:HIGH:!aNULL:!MD5:!kEDH;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
# Error pages # Error pages
error_page 403 /error/403.html; error_page 403 /error/403.html;
error_page 404 /error/404.html; error_page 404 /error/404.html;

24
install/vst-install.sh
View file

@ -212,7 +212,7 @@ fi
#----------------------------------------------------------# #----------------------------------------------------------#
# Let's start # Let's start
echo -e "\n\n\n\nInstallation will take about 15 minutes ...\n" echo -e "\n\n\n\nInstallation will take about 15 minutes ...\n"
sleep 2 sleep 5
# Update system # Update system
yum -y update yum -y update
@ -255,13 +255,23 @@ if [ ! -e '/etc/yum.repos.d/remi.repo' ]; then
fi fi
fi fi
# Install nginx repo
if [ ! -e '/etc/yum.repos.d/nginx.repo' ]; then
echo "[nginx]" > /etc/yum.repos.d/nginx.repo
echo "name=nginx repo" >> /etc/yum.repos.d/nginx.repo
echo "baseurl=http://nginx.org/packages/centos/$release/\$basearch/" \
>> /etc/yum.repos.d/nginx.repo
echo "gpgcheck=0" >> /etc/yum.repos.d/nginx.repo
echo "enabled=1" >> /etc/yum.repos.d/nginx.repo
fi
# Install vesta repo # Install vesta repo
echo "[vesta] echo "[vesta]" > $YUM_REPO
name=Vesta - $REPO echo "name=Vesta - $REPO" >> $YUM_REPO
baseurl=http://$RHOST/$REPO/$release/\$basearch/ echo "baseurl=http://$RHOST/$REPO/$release/\$basearch/" >> $YUM_REPO
enabled=1 echo "enabled=1" >> $YUM_REPO
gpgcheck=1 echo "gpgcheck=1" >> $YUM_REPO
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA" > $YUM_REPO echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA" >> $YUM_REPO
wget $CHOST/GPG.txt -O /etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA wget $CHOST/GPG.txt -O /etc/pki/rpm-gpg/RPM-GPG-KEY-VESTA