I disagree with the current nginx config... Near as I can see it's got
gaping security holes and duplicated code
I have posted my current best suggestion on issue 56 below, but I'm
really not happy with it (and it doesn't include the neat suggestions
for HTTP auth from another user)
Bigger issue is that Owncloud seems to have some mild policy, but has no
issue serving files willy nilly across the installation, nor does it
limit the executable PHP locations.. (coupled with writeable PHP this is
a potential security blackspot)
Nginx tends to encourage one to review the setup much more carefully
because you need to write stanzas more carefully for each file path. As
you can see you end up with a rather messy configuration, which could be
improved by increasing the tightness (and security) of OCs filesystem
layout for apps...
Please see if you can improve on my suggestion in issue 56 (it's the
"if" which needs to be removed...)
Ed W
On 21/02/2013 06:07, Victor Dubiniuk wrote:
Hi,
Basic Nginx config is here [1].
I'm using the following config with 4.5 [2].
I haven't set up 5.0 on this host yet but as I see there are some
updates for it [3].
[1]
http://doc.owncloud.org/server/5.0/admin_manual/installation/installation_others.html
[2] https://github.com/owncloud/documentation/issues/21
[3] https://github.com/owncloud/documentation/issues/56
Victor
On Thu, Feb 21, 2013 at 2:21 AM, Boulet <bou...@moiboulet.eu
<mailto:bou...@moiboulet.eu>> wrote:
Hi everyone,
I want to test OC 5 with nginx but I have some mistakes with the
rewrite rules.
Is anyone using nginx could share his nginx config ?
Thanks a lot,
Boulet,
A junior developer.
_______________________________________________
Owncloud mailing list
Owncloud@kde.org <mailto:Owncloud@kde.org>
https://mail.kde.org/mailman/listinfo/owncloud
_______________________________________________
Owncloud mailing list
Owncloud@kde.org
https://mail.kde.org/mailman/listinfo/owncloud
_______________________________________________
Owncloud mailing list
Owncloud@kde.org
https://mail.kde.org/mailman/listinfo/owncloud