[Owncloud] Nginx configuration

[Ed W]

Oh, you will want bang up to date nginx to avoid problems with OSX and 
DAV file sharing.  Only very recent nginx has support for chunked POSTs.

Ed W


On 21/02/2013 14:13, Ed W wrote:
> I disagree with the current nginx config... Near as I can see it's got 
> gaping security holes and duplicated code
>
> I have posted my current best suggestion on issue 56 below, but I'm 
> really not happy with it (and it doesn't include the neat suggestions 
> for HTTP auth from another user)
>
> Bigger issue is that Owncloud seems to have some mild policy, but has 
> no issue serving files willy nilly across the installation, nor does 
> it limit the executable PHP locations.. (coupled with writeable PHP 
> this is a potential security blackspot)
>
> Nginx tends to encourage one to review the setup much more carefully 
> because you need to write stanzas more carefully for each file path. 
> As you can see you end up with a rather messy configuration, which 
> could be improved by increasing the tightness (and security) of OCs 
> filesystem layout for apps...
>
> Please see if you can improve on my suggestion in issue 56 (it's the 
> "if" which needs to be removed...)
>
> Ed W
>
>
> On 21/02/2013 06:07, Victor Dubiniuk wrote:
>> Hi,
>>
>> Basic Nginx config is here [1].
>> I'm using the following config with 4.5 [2].
>> I haven't set up 5.0 on this host yet but as I see there are some 
>> updates for it [3].
>>
>> [1] 
>> http://doc.owncloud.org/server/5.0/admin_manual/installation/installation_others.html
>> [2] https://github.com/owncloud/documentation/issues/21
>> [3] https://github.com/owncloud/documentation/issues/56
>>
>> Victor
>>
>>
>> On Thu, Feb 21, 2013 at 2:21 AM, Boulet <boulet at moiboulet.eu 
>> <mailto:boulet at moiboulet.eu>> wrote:
>>
>>     Hi everyone,
>>
>>     I want to test OC 5 with nginx but I have some mistakes with the
>>     rewrite rules.
>>     Is anyone using nginx could share his nginx config ?
>>
>>     Thanks a lot,
>>
>>     Boulet,
>>     A junior developer.
>>
>>     _______________________________________________
>>     Owncloud mailing list
>>     Owncloud at kde.org <mailto:Owncloud at kde.org>
>>     https://mail.kde.org/mailman/listinfo/owncloud
>>
>>
>>
>>
>> _______________________________________________
>> Owncloud mailing list
>> Owncloud at kde.org
>> https://mail.kde.org/mailman/listinfo/owncloud
>
>
>
> _______________________________________________
> Owncloud mailing list
> Owncloud at kde.org
> https://mail.kde.org/mailman/listinfo/owncloud

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/owncloud/attachments/20130221/b9859c62/attachment.html>