Differences

This shows you the differences between two versions of the page.

--- servers:bsd:nginx:dokuwiki [2026/06/18 23:59] – [Backup] Sean Rhone
+++ servers:bsd:nginx:dokuwiki [2026/08/08 00:05] (current) – [Prerequisites] Sean Rhone
@@ Line 7: / Line 7: @@
 ===== Prerequisites =====
-  * [[bsd:server:arm:freebsd_16.0|FreeBSD 16.0]]
+  * [[bsd:server:vps:freebsd_15.1|FreeBSD 15.1]]
   * [[servers:bsd:freenginx_php_php-fpm|freenginx + PHP + PHP-FPM]]
   * [[servers:bsd:nginx:lets_encrypt|Certbot (Let's Encrypt)]]
@@ Line 54: / Line 54: @@
 ; Logging
-php_value[log_errors] = "Off"
+php_value[log_errors] = "0"
 php_value[error_reporting] = "~E_ALL"
-php_value[display_errors] = "Off"
+php_value[display_errors] = "0"
-php_value[display_startup_errors] = "Off"
+php_value[display_startup_errors] = "0"
-php_value[html_errors] = "Off"
+php_value[html_errors] = "0"
 ; General
@@ Line 83: / Line 83: @@
  fastcgi_pass '127.0.0.1:9002';
 }
+# End</code>
+===== Deny Directives =====
+  * https://www.dokuwiki.org/security#web_access_security
+  su -
+  ee '/usr/local/etc/freenginx/default.d/dokuwiki-deny.conf'
+<code>
+# Web Access Security
+ location = '/install.php' {
+  deny 'all';
+ }
+ location '~' '/(conf|bin|inc)/' {
+  deny 'all';
+ }
+ location '~' '/data/' {
+  internal;
+ }
 # End</code>
@@ Line 102: / Line 126: @@
  include '/usr/local/etc/freenginx/default.d/wiki.conf';
  include '/usr/local/etc/freenginx/default.d/headers.conf';
+# include '/usr/local/etc/freenginx/default.d/dokuwiki-deny.conf';
  add_header 'Content-Security-Policy' "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:" 'always';
@@ Line 107: / Line 133: @@
 # access_log '/var/log/nginx/wiki-access.log';
 # error_log '/var/log/nginx/wiki-error.log';
-# location = '/install.php' {
-#  deny 'all';
-# }
-# location '~' '/(conf|bin|inc)/' {
-#  deny 'all';
-# }
-# location '~' '/data/' {
-#  internal;
-# }
  location '/' {
@@ Line 146: / Line 160: @@
   * The width of the full site: ''85%''
-===== nginx Server Block Deny Directives =====
+===== nginx Deny Directive =====
-  * Uncomment commented sections (except logs)
+  * Uncomment ''dokuwiki-deny.conf'' include
   * Do after initial setup
@@ Line 316: / Line 330: @@
 ===== Folder =====
-****
   su 'root' -c "tar -czf '/home/'$USER'/dokuwiki-files-manual-'$(date +%Y-%m-%d)'.tar.gz' -C '/usr/local/www/wiki' 'data/pages' 'data/meta' 'data/media' 'data/media_meta' 'data/attic' 'data/media_attic' 'conf'"
 ===== scp =====
-****
   scp espionage724@192.168.1.152:~/'dokuwiki-files-'*'.tar.gz' ~/'Downloads'
@@ Line 330: / Line 340: @@
 ===== scp =====
-****
   scp ~/'Downloads/dokuwiki-files-'*'.tar.gz' espionage724@192.168.1.152:~