adding signature check for PrivateBin archive, securing installation by splitting web root from libraries and data

2018-06-05 07:34:09 +02:00
parent cf7d8e1e48
commit 5808886738
3 changed files with 21 additions and 10 deletions
--- a/files/nginx.conf
+++ b/files/nginx.conf
@@ -48,7 +48,7 @@ http {

    server {
        listen 80;
-        root /privatebin;
+        root /var/www;
        index index.php index.html;

        location ~* \.(jpg|jpeg|gif|css|png|js|map|woff|woff2|ttf|svg|eot)$ {
--- a/files/php-fpm.conf
+++ b/files/php-fpm.conf
@@ -11,4 +11,4 @@ pm.max_children = 5
 pm.start_servers = 2
 pm.min_spare_servers = 1
 pm.max_spare_servers = 3
-chdir = /
+chdir = /var/www