<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">Am 15.05.2017 um 00:50 schrieb Philip Rhoades <<a href="mailto:phil@pricom.com.au" class="">phil@pricom.com.au</a>>:</div><br class="Apple-interchange-newline"><div class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Also, nginx and php-fpm were actually running as services of course . .</span></div></blockquote></div><br class=""><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Maybe strip the comments next time you post a config file…</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">I have:</div><div class=""><br class=""></div><div class="">server {<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>set_real_ip_from 127.0.0.12; real_ip_header X-Forwarded-For;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>listen 80;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>server_name bla ;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>root /usr/local/www/roundcube;<br class=""> <span class="Apple-tab-span" style="white-space:pre"> </span>index index.php index.html index.htm; <br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>access_log /var/log/nginx/bla_access.log;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>error_log /var/log/nginx/bla_error.log;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>location /roundcube {<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>root /usr/local/www/roundcube ;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>try_files $uri $uri/ /index.php?q=$uri&$args;<br class=""> <span class="Apple-tab-span" style="white-space:pre"> </span>}<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>error_page 404 /404.html;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>error_page 500 502 503 504 /50x.html;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>location = /50x.html {<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>root /usr/local/www//nginx-errors;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>}<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>location ~ ^/(README.md|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ {<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>deny all;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>}<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>location ~ ^/(config|temp|logs)/ {<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>deny all;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>}<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>location ~ /\. {<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>deny all;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>access_log off;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>log_not_found off;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>}<br class=""># pass the PHP scripts to FastCGI server listening on /var/run/fastcgi/www.sock<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>location ~ \.php$ {<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>try_files $uri =404;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>fastcgi_pass unix:/var/run/fastcgi/www.sock;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>fastcgi_index index.php;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>include fastcgi_params;<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>}<br class="">}</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">root@webmail:/usr/local/etc/nginx # cat fastcgi_params<br class=""><br class="">fastcgi_param QUERY_STRING $query_string;<br class="">fastcgi_param REQUEST_METHOD $request_method;<br class="">fastcgi_param CONTENT_TYPE $content_type;<br class="">fastcgi_param CONTENT_LENGTH $content_length;<br class=""><br class="">fastcgi_param SCRIPT_NAME $fastcgi_script_name;<br class="">fastcgi_param REQUEST_URI $request_uri;<br class="">fastcgi_param DOCUMENT_URI $document_uri;<br class="">fastcgi_param DOCUMENT_ROOT $document_root;<br class="">fastcgi_param SERVER_PROTOCOL $server_protocol;<br class="">fastcgi_param HTTPS $https if_not_empty;<br class=""><br class="">fastcgi_param GATEWAY_INTERFACE CGI/1.1;<br class="">fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;<br class=""><br class="">fastcgi_param REMOTE_ADDR $remote_addr;<br class="">fastcgi_param REMOTE_PORT $remote_port;<br class="">fastcgi_param SERVER_ADDR $server_addr;<br class="">fastcgi_param SERVER_PORT $server_port;<br class="">fastcgi_param SERVER_NAME $server_name;<br class=""><br class=""># PHP only, required if PHP was built with --enable-force-cgi-redirect<br class="">fastcgi_param REDIRECT_STATUS 200;<br class=""><br class="">fastcgi_keep_conn on;<br class="">fastcgi_split_path_info ^(.+\.php)(.*)$;<br class="">fastcgi_param PATH_INFO $fastcgi_path_info;<br class="">fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Not chrooted, though, because it’s in a jail and I haven’t figured out how to setup all the fancy nullfs mounts in a jail.</div><div class=""><br class=""></div><div class="">It’s behind a haproxy that distributes traffic between various jails - but that’s irrelevant for the current case.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""><br class=""></div></body></html>