Le 8 mars 2016 à 12:01, Jean-Marc <jean-m...@6jf.be> a écrit :
> Je commence par une réponse à Ph. Gras qui galère pour mettre en place
> mailman via nginx.
>
> Dans mes recherches, je bouffe des tonnes de doc' et je me suis dit que ça
> pouvait servir à d'autres.
>
> Le wiki de nginx fournit aussi des recettes toutes prêtes dont celle-ci :
> https://www.nginx.com/resources/wiki/start/topics/recipes/mailman/
>
> Ph., dis-moi si tu y trouves ton bonheur.
Non, partiellement seulement. Mais pas le bonheur complet.
Ci-joint ma conf. NginX. Je n'ai pas encore trouvé comment
accéder à pipermail.
Ph. Gras
# You may add here your
# server {
#
# }
# statements for each of your virtual hosts to this file
##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# http://wiki.nginx.org/Pitfalls
# http://wiki.nginx.org/QuickStart
# http://wiki.nginx.org/Configuration
#
# Generally, you will want to move this file somewhere, and start with a clean
# file but keep this around for reference. Or just disable in sites-enabled.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##
server {
#listen 80 default_server;
#listen [::]:80 default_server ipv6only=on;
root /home/postal/site;
# index index.php index.html index.htm;
index index.html;
access_log /var/log/nginx/postal.access.log combined;
error_log /var/log/nginx/postal.error.log;
# Make site accessible from http://localhost/
server_name poste.enpret.com;
# rewrite ^(.*)$ http://www.magazine-litteraire.com$1 permanent;
rewrite ^/([^\.]+)$ /cgi-bin/mailman/$1 last;
rewrite ^/images/mailman/([\w-]+\.[jnpg]+)$ /$1 last;
add_header X-Robots-Tag "noindex, noarchive";
location / {
# First attempt to serve request as file, then
# as directory, then fall back to displaying a 404.
#try_files $uri $uri/ /index.php;
try_files $uri $uri/ /index.html;
# Uncomment to enable naxsi on this location
# include /etc/nginx/naxsi.rules
# deny all;
allow all;
if ($http_user_agent ~*
tools|java|crawl|bot|spider|google|bing|yandex) {
rewrite ^(.*)$ http://www.magazine-litteraire.com$1
permanent;
}
add_header X-Robots-Tag "noindex, noarchive";
}
# location /images/mailman {
# alias /var/lib/mailman/icons;
# }
location /cgi-bin/mailman {
root /usr/lib/;
fastcgi_split_path_info (^/cgi-bin/mailman/[^/]*)(.*)$;
# Disable gzip (it makes scripts feel slower since they have to
complete
# before getting gzipped)
gzip off;
# include /etc/nginx/fastcgi_params;
# include /etc/nginx/fcgiwrap.conf;
fastcgi_param SCRIPT_FILENAME
$document_root$fastcgi_script_name;
# fastcgi_param SCRIPT_FILENAME /usr/lib$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
fastcgi_intercept_errors on;
fastcgi_pass unix:/var/run/fcgiwrap.socket;
######################
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
#########################
}
location /pipermail(.*)$ {
alias /var/lib/mailman/archives/public$1;
autoindex on;
# fastcgi_split_path_info (^/pipermail)(.*)$;
fastcgi_param SCRIPT_FILENAME
$document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
fastcgi_intercept_errors on;
fastcgi_pass unix:/var/run/fcgiwrap.socket;
######################
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param REQUEST_URI $request_uri;
fastcgi_param DOCUMENT_URI $document_uri;
fastcgi_param DOCUMENT_ROOT $document_root;
fastcgi_param SERVER_PROTOCOL $server_protocol;
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port;
fastcgi_param SERVER_ADDR $server_addr;
fastcgi_param SERVER_PORT $server_port;
fastcgi_param SERVER_NAME $server_name;
#########################
}
location /doc/ {
alias /usr/share/doc/;
autoindex on;
allow 127.0.0.1;
allow ::1;
deny all;
}
location ~* \.(xml)$ {
add_header X-Robots-Tag "noindex, noarchive";
}
location ~* \.(jpg|jpeg|gif|css|png|js|ico|zip|txt|swf|mp3)$ {
# root /var/lib/mailman/icons;
root /var/lib/mailman/icons;
expires 15d;
add_header Cache-Control public;
add_header X-Robots-Tag "noindex, noarchive";
}
# Only for nginx-naxsi used with nginx-naxsi-ui : process denied
requests
#location /RequestDenied {
# proxy_pass http://127.0.0.1:8080;
#}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
#error_page 500 502 503 504 /50x.html;
#location = /50x.html {
# root /usr/share/nginx/html;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
# # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
#
# # With php5-cgi alone:
# fastcgi_pass 127.0.0.1:9000;
# # With php5-fpm:
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
}
location /wp-content/w3tc/dbcache/ { deny all; }
location ~ /wp-config\.php { deny all; }
location ~* /(?:uploads|files)/.*\.php$ { deny all; }
location ~ /\. { deny all; }
location ~* wp-login\.php {
limit_conn limit 5;
if ($http_user_agent = "-") { return 403;}
if ($http_user_agent = "") { return 403;}
# deny 127.0.0.1;
# allow all;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
}
# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
}
# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
# listen 8000;
# listen somename:8080;
# server_name somename alias another.alias;
# root html;
# index index.html index.htm;
#
# location / {
# try_files $uri $uri/ =404;
# }
#}
# HTTPS server
#
#server {
# listen 443;
# server_name localhost;
#
# root html;
# index index.html index.htm;
#
# ssl on;
# ssl_certificate cert.pem;
# ssl_certificate_key cert.key;
#
# ssl_session_timeout 5m;
#
# ssl_protocols SSLv3 TLSv1;
# ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
# ssl_prefer_server_ciphers on;
#
# location / {
# try_files $uri $uri/ =404;
# }
#}
>
> Jean-Marc <jean-m...@6jf.be>
