location /pma { root /usr/local/cwpsrv/var/services; index index.html index.htm index.php; location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_read_timeout 600; fastcgi_pass unix:/usr/local/cwp/php71/var/sockets/cwpsvc.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param SCRIPT_NAME $fastcgi_script_name; fastcgi_param PHP_ADMIN_VALUE "open_basedir = /usr/local/cwpsrv/var/services/pma/:/tmp/"; include fastcgi_params; } location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ { access_log off; log_not_found off; expires 1M; } } location /roundcube { root /usr/local/cwpsrv/var/services; index index.html index.htm index.php; location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_read_timeout 600; fastcgi_pass unix:/usr/local/cwp/php71/var/sockets/cwpsvc.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param SCRIPT_NAME $fastcgi_script_name; fastcgi_param PHP_ADMIN_VALUE "open_basedir = /usr/local/cwpsrv/var/services/roundcube/:/tmp/:/usr/local/cwp/php71/lib/"; include fastcgi_params; } location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ { access_log off; log_not_found off; expires 1M; } } location /phpPgAdmin { root /usr/local/cwpsrv/var/services; index index.html index.htm index.php; location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)\$; fastcgi_read_timeout 600; fastcgi_pass unix:/usr/local/cwp/php71/var/sockets/cwpsvc.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param SCRIPT_NAME $fastcgi_script_name; fastcgi_param PHP_ADMIN_VALUE "open_basedir = /usr/local/cwpsrv/var/services/phpPgAdmin/:/tmp/"; include fastcgi_params; } location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ { access_log off; log_not_found off; expires 1M; } } location ~ /terminal/socket.io/ { auth_pam "Secure Zone | root login required"; auth_pam_service_name "cwpadmin-auth"; # Header settings for application behind proxy proxy_set_header Host $host; # proxy_set_header X-NginX-Proxy true; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; # Proxy pass settings proxy_pass https://unix:/root/terminal.sock; # Proxy redirect settings proxy_redirect off; # HTTP version settings proxy_http_version 1.1; # Response buffering from proxied server default 1024m proxy_max_temp_file_size 0; # Proxy cache bypass define conditions under the response will not be taken from cache proxy_cache_bypass $http_upgrade; gzip on; gzip_proxied any; gzip_types *; }