Blob Blame History Raw
# Wordpress

location = /wordpress {
    alias /usr/share/wordpress/;
}

location /wordpress/ {
    root /usr/share;
    index index.php;

    location ~ ^/wordpress/wp-content/uploads/(.+)\.php$ {
        # Deny access to any php file in the uploads directory
        deny all;
    }
    location ~ ^/wordpress/wp-content/plugins/akismet/(.+)\.php$ {
        # Deny access to any php file in the akismet directory
        deny all;
    }

    # Access is only allowed via local access
    # Change this once configured
    location ~ ^/wordpress/(.+\.php)$ {
        allow 127.0.0.1;
        allow ::1;
        deny all;

        try_files $uri =404;
        fastcgi_intercept_errors on;
        include        fastcgi_params;
        fastcgi_param  SERVER_NAME      $host;
        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        fastcgi_pass   php-fpm;
    }
}