Xenforo X-Accel-Redirect Nginx Configuration help for Xenforo

@eva2000 could you help me with this:

First part will going into my SSL conf domain
so this part:

Code:

location /internal_data/ {
        internal;
        allow 127.0.0.1;
        allow MY IP;
        deny all;
    }

will become this:

Code:

location /internal_data/ {
        add_header X-Frame-Options SAMEORIGIN;
        add_header X-Content-Type-Options nosniff;
        internal;
     }

But this part

Code:

location ~ [^/]*\.php$ {
try_files $fastcgi_script_name =404;
include fastcgi.conf;
fastcgi_pass_header Etag;
}

Should be added into (nginx) staticfiles.conf?

---

 

so this ((nginx) php.conf) part:

Code:

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass   127.0.0.1:9000;
    #fastcgi_pass   unix:/tmp/php5-fpm.sock;
    fastcgi_index  index.php;
    #fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    fastcgi_param  SCRIPT_FILENAME    $request_filename;
    #fastcgi_param PHP_ADMIN_VALUE open_basedir=$document_root/:/usr/local/lib/php/:/tmp/;

to this:

Code:

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass   127.0.0.1:9000;
    #fastcgi_pass   unix:/tmp/php5-fpm.sock;
    fastcgi_index  index.php;
    #fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    fastcgi_param  SCRIPT_FILENAME    $request_filename;
    #fastcgi_param PHP_ADMIN_VALUE open_basedir=$document_root/:/usr/local/lib/php/:/tmp/;
    try_files $fastcgi_script_name =404;
    include fastcgi.conf;
    fastcgi_pass_header Etag;
}

Don't needed at all, or not needed add_header part?

I am lost again

 

And if I see right, "}" is extra

So it will be this (just two last rows):

Code:

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass   127.0.0.1:9000;
    #fastcgi_pass   unix:/tmp/php5-fpm.sock;
    fastcgi_index  index.php;
    #fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    fastcgi_param  SCRIPT_FILENAME    $request_filename;
    #fastcgi_param PHP_ADMIN_VALUE open_basedir=$document_root/:/usr/local/lib/php/:/tmp/;
    try_files $fastcgi_script_name =404;
    fastcgi_pass_header Etag;

And another code for domain.conf I do not need? I need just two new rows in code above?

Code:

add_header X-Frame-Options SAMEORIGIN;
        add_header X-Content-Type-Options nosniff;

 

Ok, then just one change (last row)

Code:

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass   127.0.0.1:9000;
    #fastcgi_pass   unix:/tmp/php5-fpm.sock;
    fastcgi_index  index.php;
    #fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    fastcgi_param  SCRIPT_FILENAME    $request_filename;
    #fastcgi_param PHP_ADMIN_VALUE open_basedir=$document_root/:/usr/local/lib/php/:/tmp/;
    fastcgi_pass_header Etag;

What about second code change in internal data in domain.conf

Code:

location ^~ /internal_data/ {
        if ($upstream_http_etag != "") {
            add_header Etag $upstream_http_etag;
        }
        internal;
    }

 

Sorry for wrong thread postings, have many tabs opened at the moment

 

Sorry, I do not understand

 

But second part was a question.
Should I change also domain.conf and somehow add/merge below code, or not?

Code:

location ^~ /internal_data/ {
        if ($upstream_http_etag != "") {
            add_header Etag $upstream_http_etag;
        }
        internal;
    }

Btw, this is link to github

 

I do not know too..
I asked Yoskaldyr, Xon and you Eva2000, and with help from all of you I can not do that correct way.

It is not XAR - attahment mode, because Yoskaldyr addon (beside rest) also has this part integrated, and I have to have installed that addon because another two addons from Yoskaldyr. So, his addon (beside rest) do same thing like Xon's addon, but it will be unlogical to have installed two addons with same purpose.
I just can not understand how to integrate that 2 codes.

cmf_core/toc.md at master · Yoskaldyr/cmf_core · GitHub

OK, for first part it is just 1 line into nginx php, but another part is going inot domain.conf, but all I can do from my level of knowledge is to integrate this

Code:

location ^~ /internal_data/ {
        if ($upstream_http_etag != "") {
            add_header Etag $upstream_http_etag;
        }
        internal;
    }

into this:

Code:

location /internal_data/ {
        internal;
        allow 127.0.0.1;
        allow 46.101.130.248;
        deny all;
    }

and will become this on the end

Code:

location ^~ /internal_data/ {
        if ($upstream_http_etag != "") {
            add_header Etag $upstream_http_etag;
        }
        internal;
    }

Deleted stuff is this:

Code:

location /internal_data/ {
allow 127.0.0.1;
allow 46.101.130.248;
deny all;

 

Conclusion...

from this suggested part of code I will use only one row:

Code:

location ~ [^/]*\.php$ {
try_files $fastcgi_script_name =404;
include fastcgi.conf;
fastcgi_pass_header Etag;
}

In (nginx) php.conf add just that one row (last in code)

Code:

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_split_path_info ^(.+\.php)(/.+)$;
    fastcgi_pass   127.0.0.1:9000;
    #fastcgi_pass   unix:/tmp/php5-fpm.sock;
    fastcgi_index  index.php;
    #fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    fastcgi_param  SCRIPT_FILENAME    $request_filename;
    #fastcgi_param PHP_ADMIN_VALUE open_basedir=$document_root/:/usr/local/lib/php/:/tmp/;
    fastcgi_pass_header Etag;

-------------------------------------------------------------------

And regarding second suggested code:

Code:

location ^~ /internal_data/ {
        if ($upstream_http_etag != "") {
            add_header Etag $upstream_http_etag;
        }
        internal;

I just put it into SSL domain.conf

Replacing this code:

Code:

location /internal_data/ {
        internal;
        allow 127.0.0.1;
        allow MY IP;
        deny all;
    }