From 37b29231e47a0c4458dc1c15d98588f16f07e1e2 Mon Sep 17 00:00:00 2001
From: Marius Cramer <m.cramer@pixcept.de>
Date: Thu, 06 Aug 2015 03:18:44 -0400
Subject: [PATCH] - don't set password via remoting if field is empty

---
 install/tpl/nginx_ispconfig.vhost.master |   11 ++++++++---
 1 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/install/tpl/nginx_ispconfig.vhost.master b/install/tpl/nginx_ispconfig.vhost.master
index 72fbacf..80fc02e 100644
--- a/install/tpl/nginx_ispconfig.vhost.master
+++ b/install/tpl/nginx_ispconfig.vhost.master
@@ -1,8 +1,12 @@
 server {
         listen {vhost_port};
-	ssl {ssl_on};
+		ssl {ssl_on};
+		{ssl_comment}ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
         {ssl_comment}ssl_certificate /usr/local/ispconfig/interface/ssl/ispserver.crt;
         {ssl_comment}ssl_certificate_key /usr/local/ispconfig/interface/ssl/ispserver.key;
+		
+		# redirect to https if accessed with http
+		{ssl_comment}error_page 497 https://$host:{vhost_port}$request_uri;
 
         server_name _;
 
@@ -15,7 +19,7 @@
         }
 
         # serve static files directly
-        location ~* ^.+.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
+        location ~* ^.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
                access_log        off;
         }
 
@@ -25,11 +29,12 @@
                fastcgi_pass unix:{fpm_socket};
                fastcgi_index index.php;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-               fastcgi_param PATH_INFO $fastcgi_script_name;
+               #fastcgi_param PATH_INFO $fastcgi_script_name;
                fastcgi_buffer_size 128k;
                fastcgi_buffers 256 4k;
                fastcgi_busy_buffers_size 256k;
                fastcgi_temp_file_write_size 256k;
+               fastcgi_read_timeout 1200;
         }
 
         location ~ /\. {

--
Gitblit v1.9.1