Commit 7dee1b7412a597b36ca3ef561b3a667cbb744c96

Authored by nollieheel
1 parent 1433e818

Version v0.5.2. Add default plugin config for wordpress sites.

  1 +## 0.5.2 - 2016-12-07
  2 +### Added
  3 +- Add different default webserver configuration for plugins on Wordpress sites.
  4 +
1 5 ## 0.5.1 - 2016-11-29
2 6 ### Fixed
3 7 - Disable default installation of php5-zip extension if on Ubuntu and not PHP5.6 because there is no such package.
... ...
... ... @@ -4,7 +4,7 @@ maintainer_email 'sysadmin@chromedia.com'
4 4 license 'Apache License'
5 5 description 'Simplifies setup of Nginx+PHP-FPM in Chromedia.'
6 6 long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
7   -version '0.5.1'
  7 +version '0.5.2'
8 8
9 9 {
10 10 'openssl' => '4.4.0',
... ...
... ... @@ -20,6 +20,49 @@ location ~* ^/<%= @subpath %>.+\.(<%= @static_types.join('|') %>)$ {
20 20 <% @add_statements.each do |ads| -%>
21 21 <%= ads %>
22 22
  23 +# For Wordpress plugin (if used): Wordfence
  24 +location ~ ^/<%= @subpath %>wp-content/plugins/wordfence/(tmp|lib) {
  25 + deny all;
  26 +}
  27 +
  28 +location ~ ^/<%= @subpath %>wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/logs {
  29 + deny all;
  30 +}
  31 +
  32 +location ~ ^/<%= @subpath %>wp-content/wflogs {
  33 + deny all;
  34 +}
  35 +
  36 +# For Wordpress plugin (if used): Akismet
  37 +location ~ ^/<%= @subpath %>wp-content/plugins/akismet/.+\.(png|gif)$ {
  38 + access_log off;
  39 + expires max;
  40 +}
  41 +
  42 +location ~ ^/<%= @subpath %>wp-content/plugins/akismet/.+(form|akismet)\.(css|js)$ {
  43 + access_log off;
  44 + expires max;
  45 +}
  46 +
  47 +location ~ ^/<%= @subpath %>wp-content/plugins/akismet {
  48 + deny all;
  49 +}
  50 +
  51 +# For Wordpress plugin (if used): Simple Captcha
  52 +location ~ ^/<%= @subpath %>wp-content/uploads/wpcf7_captcha/.+\.(jpeg|gif|png)$ {
  53 + access_log off;
  54 + expires max;
  55 +}
  56 +
  57 +location ~ ^/<%= @subpath %>wp-content/uploads/wpcf7_captcha {
  58 + deny all;
  59 +}
  60 +
  61 +# For other Wordpress plugins and stuff:
  62 +location ~ ^/<%= @subpath %>wp-content/uploads/dlm_uploads {
  63 + deny all;
  64 +}
  65 +
23 66 <% end -%>
24 67 # Deny access to any files with a .php extension in the uploads directory
25 68 # Keep logging the requests to parse later (or to pass to firewall utilities such as fail2ban)
... ...