docker 装 nginx+naxsi web waf防火墙 捍卫网站安全 不断扩展中

dgiu***

naxsi 已经集成再 nginx 里面。附下载：链接: https://pan.baidu.com/s/1qqlDbwNAjQZKq77xv3DTTg 提取码: mucv

卷说明：
"/etc/nginx/conf.d" \    -----  nginx配置目录
"/etc/nginx/naxsi" \    -----  naxsi规则目录
"/etc/nginx/ssl" \   -----  SSL证书目录
"/usr/share/nginx/html" \   -----  网站根目录
"/var/log/nginx"   -----  日志


typecho.conf 样板：

1. server {
   
2.     listen       80;
   
3.     server_name  localhost;
   
4.     include        /etc/nginx/naxsi/mian-rules/*.rulse;
   
5. 
   
6.     #charset koi8-r;
   
7.     #access_log  /var/log/nginx/log/host.access.log  main;
   
8. 
   
9.     location / {
   
10.         root   /usr/share/nginx/html;
    
11.         index  index.html index.htm index.php;
    
12.          include        /etc/nginx/naxsi/doxi-rules/*.rules;  
    
13.           include        /etc/nginx/naxsi/whitelists/*.wl;
    
14.          fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    
15. 
    
16. 
    
17.      #Typecho Nginx rewrite
    
18.     if (-f $request_filename/index.html){
    
19.         rewrite (.*) $1/index.html break;
    
20.     }
    
21.     if (-f $request_filename/index.php){
    
22.         rewrite (.*) $1/index.php;
    
23.     }
    
24.     if (!-f $request_filename){
    
25.         rewrite (.*) /index.php;
    
26.     }
    
27. 
    
28.     }
    
29.      
    
30. 
    
31. 
    
32.     #error_page  404              /404.html;
    
33. 
    
34.     # redirect server error pages to the static page /50x.html
    
35.     #
    
36.     error_page   500 502 503 504  /50x.html;
    
37.     location = /50x.html {
    
38.         root   /usr/share/nginx/html;
    
39.     }
    
40. 
    
41.     # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    
42.     #
    
43.     #location ~ \.php$ {
    
44.     #    proxy_pass   http://127.0.0.1;
    
45.     #}
    
46. 
    
47.     # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    
48.     #
    
49.     location ~ \.php$ {
    
50.         root           html;
    
51.         fastcgi_pass   172.17.0.4:9000;
    
52.         fastcgi_index  index.php;
    
53.         fastcgi_param  SCRIPT_FILENAME  /var/www/html$fastcgi_script_name;
    
54.         include        fastcgi_params;
    
55.     }
    
56. 
    
57.     # deny access to .htaccess files, if Apache's document root
    
58.     # concurs with nginx's one
    
59.     #
    
60.     #location ~ /\.ht {
    
61.     #    deny  all;
    
62.     #}
    
63. }
    
64. 
    

复制代码

尐ˊ;***

二楼？  字数补丁

zhouh***

观看中...............

dgiu***

更新教程中。。。。。。。