Initial commit

conf/nginx/options-ssl-nginx.conf

@@ -0,0 +1,14 @@
+# This file contains important security parameters. If you modify this file
+# manually, Certbot will be unable to automatically provide future security
+# updates. Instead, Certbot will print and log an error message with a path to
+# the up-to-date file that you will need to refer to when manually updating
+# this file.
+
+ssl_session_cache shared:le_nginx_SSL:5m; # was 1m (1 MB)
+ssl_session_timeout 1440m;
+
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_prefer_server_ciphers on;
+
+ssl_ciphers  "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH !RC4";
+#ssl_ciphers  HIGH:!aNULL:!MD5;

conf/nginx/site-enabled_aether-mailman2.conf

@@ -0,0 +1,20 @@
+server {
+  listen 80;
+  listen [::]:80;
+  server_name mailman2-oneskyit.localhost mailman2.oneskyit.com;
+
+  access_log  /logs/nginx/access_oneskyit_mailman2.log;
+
+  index index.php;
+
+  location / {
+      proxy_pass http://mailman2:80;
+      proxy_pass_header Content-Type;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade; # allow websockets
+      proxy_pass_header Connection;
+      proxy_set_header X-Real-IP  $remote_addr;
+      proxy_set_header X-Forwarded-For $remote_addr;
+      proxy_set_header Host $host;
+  }
+}

conf/nginx/site-enabled_aether-nextcloud.conf

@@ -0,0 +1,194 @@
+upstream php-handler {
+    server nextcloud25:9000;
+    # server unix:/var/run/php/php7.4-fpm.sock;
+}
+
+# Set the `immutable` cache control options only for assets with a cache busting `v` argument
+map $arg_v $asset_immutable {
+    "" "";
+    default "immutable";
+}
+
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name nextcloud.oneskyit.com;
+
+    # Prevent nginx HTTP Server Detection
+    server_tokens off;
+
+    # Enforce HTTPS
+    return 301 https://$server_name$request_uri;
+}
+
+server {
+    listen 443      ssl http2;
+    listen [::]:443 ssl http2;
+    server_name nextcloud.oneskyit.com;
+
+    access_log  /logs/nginx/access_oneskyit_nextcloud.log;
+
+    # Path to the root of your installation
+    # root /srv/nextcloud;
+    root /var/www/html;
+
+    # Use Mozilla's guidelines for SSL/TLS settings
+    # https://mozilla.github.io/server-side-tls/ssl-config-generator/
+    # ssl_certificate     /etc/ssl/nginx/nextcloud.oneskyit.com.crt;
+    # ssl_certificate_key /etc/ssl/nginx/nextcloud.oneskyit.com.key;
+
+    include /etc/nginx/options-ssl-nginx.conf;
+
+    ssl_certificate /etc/certs/fullchain.pem;
+    ssl_certificate_key /etc/certs/privkey.pem;
+    ssl_dhparam /etc/certs/ssl-dhparams.pem;
+
+    # Prevent nginx HTTP Server Detection
+    server_tokens off;
+
+    # HSTS settings
+    # WARNING: Only add the preload option once you read about
+    # the consequences in https://hstspreload.org/. This option
+    # will add the domain to a hardcoded list that is shipped
+    # in all major browsers and getting removed from this list
+    # could take several months.
+    #add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload" always;
+
+    # set max upload size and increase upload timeout:
+    client_max_body_size 512M;
+    client_body_timeout 300s;
+    fastcgi_buffers 64 4K;
+
+    # Enable gzip but do not remove ETag headers
+    gzip on;
+    gzip_vary on;
+    gzip_comp_level 4;
+    gzip_min_length 256;
+    gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
+    gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
+
+    # Pagespeed is not supported by Nextcloud, so if your server is built
+    # with the `ngx_pagespeed` module, uncomment this line to disable it.
+    #pagespeed off;
+
+    # The settings allows you to optimize the HTTP2 bandwitdth.
+    # See https://blog.cloudflare.com/delivering-http-2-upload-speed-improvements/
+    # for tunning hints
+    client_body_buffer_size 512k;
+
+    # HTTP response headers borrowed from Nextcloud `.htaccess`
+    add_header Referrer-Policy                      "no-referrer"   always;
+    add_header X-Content-Type-Options               "nosniff"       always;
+    add_header X-Download-Options                   "noopen"        always;
+    add_header X-Frame-Options                      "SAMEORIGIN"    always;
+    add_header X-Permitted-Cross-Domain-Policies    "none"          always;
+    add_header X-Robots-Tag                         "none"          always;
+    add_header X-XSS-Protection                     "1; mode=block" always;
+
+    # Remove X-Powered-By, which is an information leak
+    fastcgi_hide_header X-Powered-By;
+
+    # Specify how to handle directories -- specifying `/index.php$request_uri`
+    # here as the fallback means that Nginx always exhibits the desired behaviour
+    # when a client requests a path that corresponds to a directory that exists
+    # on the server. In particular, if that directory contains an index.php file,
+    # that file is correctly served; if it doesn't, then the request is passed to
+    # the front-end controller. This consistent behaviour means that we don't need
+    # to specify custom rules for certain paths (e.g. images and other assets,
+    # `/updater`, `/ocm-provider`, `/ocs-provider`), and thus
+    # `try_files $uri $uri/ /index.php$request_uri`
+    # always provides the desired behaviour.
+    index index.php index.html /index.php$request_uri;
+
+    # Rule borrowed from `.htaccess` to handle Microsoft DAV clients
+    location = / {
+        if ( $http_user_agent ~ ^DavClnt ) {
+            return 302 /remote.php/webdav/$is_args$args;
+        }
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    # Make a regex exception for `/.well-known` so that clients can still
+    # access it despite the existence of the regex rule
+    # `location ~ /(\.|autotest|...)` which would otherwise handle requests
+    # for `/.well-known`.
+    location ^~ /.well-known {
+        # The rules in this block are an adaptation of the rules
+        # in `.htaccess` that concern `/.well-known`.
+
+        location = /.well-known/carddav { return 301 /remote.php/dav/; }
+        location = /.well-known/caldav  { return 301 /remote.php/dav/; }
+
+        location /.well-known/acme-challenge    { try_files $uri $uri/ =404; }
+        location /.well-known/pki-validation    { try_files $uri $uri/ =404; }
+
+        # Let Nextcloud's API for `/.well-known` URIs handle all other
+        # requests by passing them to the front-end controller.
+        return 301 /index.php$request_uri;
+    }
+
+    # Rules borrowed from `.htaccess` to hide certain paths from clients
+    location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)(?:$|/)  { return 404; }
+    location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console)                { return 404; }
+
+    # Ensure this block, which passes PHP files to the PHP process, is above the blocks
+    # which handle static assets (as seen below). If this block is not declared first,
+    # then Nginx will encounter an infinite rewriting loop when it prepends `/index.php`
+    # to the URI, resulting in a HTTP 500 error response.
+    location ~ \.php(?:$|/) {
+        # Required for legacy support
+        rewrite ^/(?!index|remote|public|cron|core\/ajax\/update|status|ocs\/v[12]|updater\/.+|oc[ms]-provider\/.+|.+\/richdocumentscode\/proxy) /index.php$request_uri;
+
+        fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+        set $path_info $fastcgi_path_info;
+
+        try_files $fastcgi_script_name =404;
+
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        # fastcgi_param SCRIPT_FILENAME /var/www/html/$fastcgi_script_name;
+        fastcgi_param PATH_INFO $path_info;
+        fastcgi_param HTTPS on;
+
+        fastcgi_param modHeadersAvailable true;         # Avoid sending the security headers twice
+        fastcgi_param front_controller_active true;     # Enable pretty urls
+        fastcgi_pass php-handler;
+
+        fastcgi_intercept_errors on;
+        fastcgi_request_buffering off;
+
+        fastcgi_max_temp_file_size 0;
+    }
+
+    location ~ \.(?:css|js|svg|gif|png|jpg|ico|wasm|tflite|map)$ {
+        try_files $uri /index.php$request_uri;
+        add_header Cache-Control "public, max-age=15778463, $asset_immutable";
+        access_log off;     # Optional: Don't log access to assets
+
+        location ~ \.wasm$ {
+            default_type application/wasm;
+        }
+    }
+
+    location ~ \.woff2?$ {
+        try_files $uri /index.php$request_uri;
+        expires 7d;         # Cache-Control policy borrowed from `.htaccess`
+        access_log off;     # Optional: Don't log access to assets
+    }
+
+    # Rule borrowed from `.htaccess`
+    location /remote {
+        return 301 /remote.php$request_uri;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php$request_uri;
+    }
+}
+

conf/nginx/site-enabled_aether-phpmyadmin.conf

@@ -0,0 +1,20 @@
+server {
+  listen 80;
+  listen [::]:80;
+  server_name phpmyadmin-oneskyit.localhost phpmyadmin.oneskyit.com;
+
+  access_log  /logs/nginx/access_oneskyit_phpmyadmin.log;
+
+  index index.php;
+
+  location / {
+      proxy_pass http://phpmyadmin:80;
+      proxy_pass_header Content-Type;
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade; # allow websockets
+      proxy_pass_header Connection;
+      proxy_set_header X-Real-IP  $remote_addr;
+      proxy_set_header X-Forwarded-For $remote_addr;
+      proxy_set_header Host $host;
+  }
+}

conf/nginx/site-enabled_aether_fastapi_gunicorn.conf

@@ -0,0 +1,101 @@
+server {
+    listen 80;
+    listen [::]:80;
+    
+    server_name
+        fastapi_gunicorn.localhost
+        dev-api.localhost
+        dev-api.oneskyit.com
+        ;
+
+    access_log  /logs/nginx/access_fastapi_gunicorn.log;
+    error_log  /logs/nginx/error_fastapi_gunicorn.log;
+
+    client_max_body_size 5120M; #4096M or 4G; 5120M or 5G;
+
+    location / {
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_redirect off;
+        proxy_buffering off;
+
+        # This is needed for long running Python code. Default is 60 seconds
+        # Increased from 1200 to 1500 on 2022-04-17
+        fastcgi_connect_timeout 1500s;
+        fastcgi_send_timeout 1500s;
+        fastcgi_read_timeout 1500s;
+        proxy_read_timeout 1500s;
+
+        proxy_pass http://fastapi_backend;
+    }
+}
+
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl http2;
+    
+    server_name
+        fastapi_gunicorn.localhost
+        dev-api.localhost
+        dev-api.oneskyit.com
+        ;
+
+    access_log  /logs/nginx/access_fastapi_gunicorn.log;
+    error_log  /logs/nginx/error_fastapi_gunicorn.log;
+
+    include /etc/nginx/options-ssl-nginx.conf;
+
+    ssl_certificate /etc/certs/fullchain.pem;
+    ssl_certificate_key /etc/certs/privkey.pem;
+    ssl_dhparam /etc/certs/ssl-dhparams.pem;
+
+    # include brotli.conf;
+    # include gzip.conf;
+
+    client_max_body_size 5120M; #4096M or 4G; 5120M or 5G;
+
+    location / {
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_redirect off;
+        proxy_buffering off;
+
+        # This is needed for long running Python code. Default is 60 seconds
+        # Increased from 1200 to 1500 on 2022-04-17
+        fastcgi_connect_timeout 1500s;
+        fastcgi_send_timeout 1500s;
+        fastcgi_read_timeout 1500s;
+        proxy_read_timeout 1500s;
+
+        proxy_pass http://fastapi_backend;
+    }
+}
+
+
+upstream fastapi_backend {
+    # sticky sessions
+    ip_hash;
+
+    # enable least connections balancing method
+    # least_conn;
+
+    # zone backend 64k;  # Use NGINX Plus' shared memory
+
+    # server webserver1 weight=1;
+    # server webserver2 weight=4;
+
+    # larger number will recieve more requests
+    # Example of 20 vs 10: 20 will recieve twice as many requests as 10
+    server aether_api_gunicorn:5005 weight=20 max_fails=3 fail_timeout=30s;
+    # server aether_api_gunicorn_bak:5005 weight=10 max_fails=1 fail_timeout=30s;
+
+    # maintain up to 20 idle connections to the group of upstream servers
+    # keepalive 20;
+}

conf/nginx/site-enabled_aether_flask_gunicorn.conf

@@ -0,0 +1,127 @@
+server {
+    listen 80;
+    listen [::]:80;
+    
+    server_name
+        flask_gunicorn.localhost demo.localhost dev.localhost
+        
+        dev.oneskyit.com
+        dev-app.oneskyit.com
+        dev-connect.oneskyit.com *.dev-connect.oneskyit.com
+        dev-demo.oneskyit.com *.dev-demo.oneskyit.com
+        
+        dev-aapor.oneskyit.com *.dev-aapor.oneskyit.com
+        dev-businessgroup.oneskyt.com *.dev-businessgroup.oneskyt.com
+        
+        dev-cmsc.oneskyit.com *.dev-cmsc.oneskyit.com
+        dev-idaa.oneskyit.com *.dev-idaa.oneskyit.com
+        dev-ishlt.oneskyit.com *.dev-ishlt.oneskyit.com
+        dev-ncsd.oneskyit.com *.dev-ncsd.oneskyit.com
+        dev-npa.oneskyit.com *.dev-npa.oneskyit.com
+        dev-rli.oneskyit.com *.dev-rli.oneskyit.com
+        ;
+
+    access_log  /logs/nginx/access_flask_gunicorn.log;
+    error_log  /logs/nginx/error_flask_gunicorn.log;
+
+    client_max_body_size 5120M; #4096M or 4G; 5120M or 5G;
+
+    location / {
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_redirect off;
+        proxy_buffering off;
+
+        # This is needed for long running Python code. Default is 60 seconds
+        # Increased from 1200 to 1500 on 2022-04-17
+        fastcgi_connect_timeout 1500s;
+        fastcgi_send_timeout 1500s;
+        fastcgi_read_timeout 1500s;
+        proxy_read_timeout 1500s;
+
+        proxy_pass http://flask_backend;
+    }
+}
+
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl http2;
+    
+    server_name
+        flask_gunicorn.localhost demo.localhost dev.localhost
+        
+        dev.oneskyit.com
+        dev-app.oneskyit.com
+        dev-connect.oneskyit.com *.dev-connect.oneskyit.com
+        dev-demo.oneskyit.com *.dev-demo.oneskyit.com
+        
+        dev-aapor.oneskyit.com *.dev-aapor.oneskyit.com
+        dev-businessgroup.oneskyt.com *.dev-businessgroup.oneskyt.com
+        
+        dev-cmsc.oneskyit.com *.dev-cmsc.oneskyit.com
+        dev-idaa.oneskyit.com *.dev-idaa.oneskyit.com
+        dev-ishlt.oneskyit.com *.dev-ishlt.oneskyit.com
+        dev-ncsd.oneskyit.com *.dev-ncsd.oneskyit.com
+        dev-npa.oneskyit.com *.dev-npa.oneskyit.com
+        dev-rli.oneskyit.com *.dev-rli.oneskyit.com
+        ;
+
+    access_log  /logs/nginx/access_flask_gunicorn.log;
+    error_log  /logs/nginx/error_flask_gunicorn.log;
+
+    include /etc/nginx/options-ssl-nginx.conf;
+
+    ssl_certificate /etc/certs/fullchain.pem;
+    ssl_certificate_key /etc/certs/privkey.pem;
+    ssl_dhparam /etc/certs/ssl-dhparams.pem;
+
+    # include brotli.conf;
+    # include gzip.conf;
+
+    client_max_body_size 5120M; #4096M or 4G; 5120M or 5G;
+
+    location / {
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_redirect off;
+        proxy_buffering off;
+
+        # This is needed for long running Python code. Default is 60 seconds
+        # Increased from 1200 to 1500 on 2022-04-17
+        fastcgi_connect_timeout 1500s;
+        fastcgi_send_timeout 1500s;
+        fastcgi_read_timeout 1500s;
+        proxy_read_timeout 1500s;
+
+        proxy_pass http://flask_backend;
+    }
+}
+
+
+upstream flask_backend {
+    # sticky sessions
+    ip_hash;
+
+    # enable least connections balancing method
+    # least_conn;
+
+    # zone backend 64k;  # Use NGINX Plus' shared memory
+
+    # server webserver1 weight=1;
+    # server webserver2 weight=4;
+
+    # larger number will recieve more requests
+    # Example of 20 vs 10: 20 will recieve twice as many requests as 10
+    server aether_app_gunicorn:5005 weight=20 max_fails=3 fail_timeout=30s;
+    # server aether_app_gunicorn_bak:5005 weight=10 max_fails=1 fail_timeout=30s;
+
+    # maintain up to 20 idle connections to the group of upstream servers
+    # keepalive 20;
+}

conf/nginx/site-enabled_oneskyit.conf

@@ -0,0 +1,150 @@
+server {
+  listen 80;
+  listen [::]:80;
+  server_name oneskyit.localhost;
+
+  access_log  /logs/nginx/access_oneskyit.log;
+
+  # Do not overflow the SSL send buffer (causes extra round trips)
+  #ssl_buffer_size 8k;
+
+  root /srv/oneskyit_site;
+
+  index index.php index.html;
+  # index  index.html index.htm index.php;
+
+  # include php.conf;
+  # include brotli.conf;
+  # include gzip.conf;
+  # include expires.conf;
+
+  # These two locations remove .html and .php from filenames.
+  location / {
+    try_files $uri $uri/ $uri.html $uri.php$is_args$query_string;
+  }
+
+  location ~ \.php$ {
+    root /srv/oneskyit_site;
+
+    # index  index.html index.htm index.php;
+
+    try_files $uri =404;
+    # try_files $uri $document_root$fastcgi_script_name =404;
+
+    fastcgi_split_path_info ^(.+\.php)(/.+)$;
+    fastcgi_pass php7:9000;
+    fastcgi_index index.php;
+    include fastcgi_params;
+    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+    fastcgi_param PATH_INFO $fastcgi_path_info;
+  }
+
+#   location ~ \.php$ {
+#     try_files $uri =404;
+#   }
+
+}
+
+
+
+# # Redirect http to https
+# server {
+#   listen 80;
+#   listen [::]:80;
+#   server_name    oneskyit.com;
+#   return         301 https://oneskyit.com$request_uri;
+# }
+#
+# #upstream oneskyit {
+#   #least_conn;
+# #  ip_hash;
+#   #server localhost:8889;
+#   #server localhost:8889;
+# #}
+#
+
+server {
+  listen 443 ssl http2;
+  listen [::]:443 ssl http2;
+  server_name docker.oneskyit.com;
+
+  access_log  /logs/nginx/access_oneskyit.log;
+  error_log  /logs/nginx/error_oneskyit.log;
+
+  # Do not overflow the SSL send buffer (causes extra round trips)
+  #ssl_buffer_size 8k;
+
+  include /etc/nginx/options-ssl-nginx.conf;
+
+  ssl_certificate /etc/certs/fullchain.pem;
+  ssl_certificate_key /etc/certs/privkey.pem;
+  ssl_dhparam /etc/certs/ssl-dhparams.pem;
+
+  root /srv/oneskyit_site;
+
+  index index.php index.html;
+
+#
+#   root /srv/http/oneskyit.com/;
+#   index index.php index.html;
+#
+#   include php.conf;
+#   include brotli.conf;
+#   include gzip.conf;
+#   include expires.conf;
+#
+    # These two locations remove .html and .php from filenames.
+    location / {
+      try_files $uri $uri/ $uri.html $uri.php$is_args$query_string;
+    }
+
+  location ~ \.php$ {
+    root /srv/oneskyit_site;
+
+    # index  index.html index.htm index.php;
+
+    try_files $uri =404;
+    # try_files $uri $document_root$fastcgi_script_name =404;
+
+    fastcgi_split_path_info ^(.+\.php)(/.+)$;
+    fastcgi_pass php7:9000;
+    fastcgi_index index.php;
+    include fastcgi_params;
+    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+    fastcgi_param PATH_INFO $fastcgi_path_info;
+  }
+}
+
+#   location ~ \.php$ {
+#     try_files $uri =404;
+#   }
+#
+#   #location / {
+#   #  include uwsgi_params;
+#   #  #uwsgi_pass oneskyit;
+#   #  proxy_pass http://oneskyit;
+#   #  #uwsgi_pass uwsgi://oneskyit.com:8889;
+#   #
+#   #  #proxy_pass http://apptest;
+#   #  #uwsgi_pass uwsgi://oneskyit.com:8890;
+#   #  #uwsgi_pass uwsgi://oneskyit.com:8889;
+#   #}
+#
+#   ssl_certificate /etc/letsencrypt/live/oneskyit.com/fullchain.pem; # managed by Certbot
+#   #ssl_certificate /etc/letsencrypt/live/oneskyit.com-0001/fullchain.pem; # managed by Certbot
+#   ssl_certificate_key /etc/letsencrypt/live/oneskyit.com/privkey.pem; # managed by Certbot
+#   #ssl_certificate_key /etc/letsencrypt/live/oneskyit.com-0001/privkey.pem; # managed by Certbot
+#   include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+#   ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+#
+#   #ssl_session_cache    shared:SSL:5m; # was 1m (1 MB)
+#   #ssl_session_timeout  1h; # was 5m (5 minutes)
+#
+#   ssl_buffer_size 8k;
+#
+#
+#   if ($scheme != "https"){
+#     return 301 https://$host$request_uri;
+#   } # managed by Certbot
+#
+# }

conf/nginx/site.conf

@@ -0,0 +1,60 @@
+server {
+    listen       80;
+    server_name  docker.localhost;
+
+    error_log  /logs/nginx/error_docker.log;
+    access_log /logs/nginx/access_docker.log;
+
+    root   /srv/html_php;
+
+    index  index.html index.htm index.php;
+
+    # location / {
+    #     # root   /usr/share/nginx/html;
+    #     index  index.html index.htm;
+    # }
+
+    location ~ \.php$ {
+        index  index.html index.htm index.php;
+
+        try_files $uri =404;
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass php7:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+        fastcgi_param PATH_INFO $fastcgi_path_info;
+    }
+
+    #error_page  404              /404.html;
+
+    # redirect server error pages to the static page /50x.html
+    #
+    # error_page   500 502 503 504  /50x.html;
+    # location = /50x.html {
+    #     root   /usr/share/nginx/html;
+    # }
+
+    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
+    #
+    #location ~ \.php$ {
+    #    proxy_pass   http://127.0.0.1;
+    #}
+
+    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
+    #
+    #location ~ \.php$ {
+    #    root           html;
+    #    fastcgi_pass   127.0.0.1:9000;
+    #    fastcgi_index  index.php;
+    #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
+    #    include        fastcgi_params;
+    #}
+
+    # deny access to .htaccess files, if Apache's document root
+    # concurs with nginx's one
+    #
+    #location ~ /\.ht {
+    #    deny  all;
+    #}
+}

conf/nginx/uwsgi_params

@@ -0,0 +1,34 @@
+uwsgi_param  QUERY_STRING       $query_string;
+uwsgi_param  REQUEST_METHOD     $request_method;
+uwsgi_param  CONTENT_TYPE       $content_type;
+uwsgi_param  CONTENT_LENGTH     $content_length;
+
+uwsgi_param  REQUEST_URI        $request_uri;
+uwsgi_param  PATH_INFO          $document_uri;
+uwsgi_param  DOCUMENT_ROOT      $document_root;
+uwsgi_param  SERVER_PROTOCOL    $server_protocol;
+uwsgi_param  REQUEST_SCHEME     $scheme;
+uwsgi_param  HTTPS              $https if_not_empty;
+
+uwsgi_param  REMOTE_ADDR        $remote_addr;
+uwsgi_param  REMOTE_PORT        $remote_port;
+uwsgi_param  SERVER_PORT        $server_port;
+uwsgi_param  SERVER_NAME        $server_name;
+
+# From uWSGI documentation:
+# https://uwsgi-docs.readthedocs.io/en/latest/Nginx.html
+#uwsgi_param QUERY_STRING $query_string;
+#uwsgi_param REQUEST_METHOD $request_method;
+#uwsgi_param CONTENT_TYPE $content_type;
+#uwsgi_param CONTENT_LENGTH $content_length;
+
+#uwsgi_param REQUEST_URI $request_uri;
+#uwsgi_param PATH_INFO $document_uri;
+#uwsgi_param DOCUMENT_ROOT $document_root;
+#uwsgi_param SERVER_PROTOCOL $server_protocol;
+
+#uwsgi_param REMOTE_ADDR $remote_addr;
+#uwsgi_param REMOTE_PORT $remote_port;
+#uwsgi_param SERVER_ADDR $server_addr;
+#uwsgi_param SERVER_PORT $server_port;
+#uwsgi_param SERVER_NAME $server_name;