Differences

This shows you the differences between two versions of the page.

--- servers:linux:nginx:dokuwiki [2026/05/08 13:52] – Sean Rhone
+++ servers:linux:nginx:dokuwiki [2026/07/10 20:54] (current) – [Server Block] Sean Rhone
@@ Line 7: / Line 7: @@
 ===== Prerequisites =====
-  * [[linux:distros:server:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]
+  * [[linux:distros:server:arm:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]
   * [[servers:linux:nginx_php_php-fpm|nginx + PHP + PHP-FPM]]
   * [[servers:linux:nginx:lets_encrypt|Certbot (Let's Encrypt)]]
@@ Line 17: / Line 17: @@
   * https://github.com/dokuwiki/dokuwiki/blob/master/composer.json
-  sudo zypper install php8-bz2 php8-gd php8-intl php8-mbstring php8-sodium php8-zlib
+  sudo zypper install php8-bz2 php8-gd php8-intl php8-mbstring php8-openssl php8-sodium php8-zlib
 ====== Download Source ======
@@ Line 61: / Line 61: @@
 <code>
- location '~' '\.(php|phar)(/.*)?$' {
+location '~' '\.(php|phar)(/.*)?$' {
-  fastcgi_split_path_info '^(.+\.(?:php|phar))(/.*)$';
+ fastcgi_split_path_info '^(.+\.(?:php|phar))(/.*)$';
-  fastcgi_intercept_errors 'on';
+ fastcgi_intercept_errors 'on';
-  fastcgi_index 'doku.php';
+ fastcgi_index 'doku.php';
-  include 'fastcgi_params';
+ include 'fastcgi_params';
-  fastcgi_param 'SCRIPT_FILENAME' '$document_root$fastcgi_script_name';
+ fastcgi_param 'SCRIPT_FILENAME' '$document_root$fastcgi_script_name';
-  fastcgi_param 'PATH_INFO' '$fastcgi_path_info';
+ fastcgi_param 'PATH_INFO' '$fastcgi_path_info';
-  fastcgi_param 'HTTPS' 'on';
+ fastcgi_param 'HTTPS' 'on';
-  fastcgi_pass 'unix:/run/php-fpm/wiki.sock';
+ fastcgi_pass 'unix:/run/php-fpm/wiki.sock';
- }
+}
+# End</code>
+===== Deny Directives =====
+  * https://www.dokuwiki.org/security#web_access_security
+  sudo -e '/etc/nginx/default.d/dokuwiki-deny.conf'
+<code>
+# Web Access Security
+location = '/install.php' {
+ deny 'all';
+}
+location '~' '/(conf|bin|inc)/' {
+ deny 'all';
+}
+location '~' '/data/' {
+ internal;
+}
 # End</code>
@@ Line 88: / Line 110: @@
  include '/etc/nginx/default.d/wiki.conf';
  include '/etc/nginx/default.d/headers.conf';
+# include '/etc/nginx/default.d/dokuwiki-deny.conf';
- client_max_body_size '10M';
  add_header 'Content-Security-Policy' "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:" 'always';
@@ Line 95: / Line 116: @@
 # access_log '/var/log/nginx/wiki-access.log';
 # error_log '/var/log/nginx/wiki-error.log';
-# location = '/install.php' {
-#  deny 'all';
-# }
-# location '~' '/(conf|bin|inc)/' {
-#  deny 'all';
-# }
-# location '~' '/data/' {
-#  internal;
-# }
  location '/' {
@@ Line 134: / Line 143: @@
   * The width of the full site: ''85%''
-===== nginx Server Block Deny Directives =====
+===== nginx Deny Directive =====
-  * Uncomment commented sections (except logs)
+  * Uncomment ''dokuwiki-deny.conf'' include
   * Do after initial setup
@@ Line 281: / Line 290: @@
 ===== Files =====
-****
   sudo tar -czf ~/'dokuwiki-files-manual-'$(date +%Y-%m-%d)'.tar.gz' -C '/srv/www/wiki' 'data/pages' 'data/meta' 'data/media' 'data/media_meta' 'data/attic' 'data/media_attic' 'conf'
 ===== scp =====
-****
   scp espionage724@192.168.1.152:~/'dokuwiki-files-'*'.tar.gz' ~/'Downloads'
@@ Line 295: / Line 300: @@
 ===== scp =====
-****
   scp ~/'Downloads/dokuwiki-files-'*'.tar.gz' espionage724@192.168.1.152:~
 ===== Stop nginx =====
-****
   sudo systemctl stop 'nginx'
 ===== Remove Existing Files =====
-****
   ls ~/'dokuwiki-files-'*'.tar.gz' && sudo rm -Rf '/srv/www/wiki/data/pages' '/srv/www/wiki/data/meta' '/srv/www/wiki/data/media' '/srv/www/wiki/data/media_meta' '/srv/www/wiki/data/attic' '/srv/www/wiki/data/media_attic' '/srv/www/wiki/conf'
 ===== Restore Files =====
-****
   sudo tar -xzf ~/'dokuwiki-files-'*'.tar.gz' -C '/srv/www/wiki' 'data/pages' 'data/meta' 'data/media' 'data/media_meta' 'data/attic' 'data/media_attic' 'conf' && sudo chown -R 'wwwrun':'www' '/srv/www/wiki' && sudo chmod -R '0755' '/srv/www/wiki'
@@ Line 355: / Line 352: @@
 ===== Start nginx =====
-****
   sudo systemctl start 'nginx'
 ===== Clean-up =====
-****
   rm -fv ~/'dokuwiki-files-'*'.tar.gz'