Martin DENIZET

Update 2014-07-19:
Adjusted the order of the statement to fix public downloads.
Update 2014-07-02:
Corrected permission. thanks to Koen Vermeer and Maruprez for reporting the issue.

As interest for nginx is growing, I thought it way it time to update my Pydio tutorial with the nginx configuration.

Generate a self-signed SSL certificate:

On Debian:

mkdir -p /etc/ssl/localcerts
apt-get install openssl
openssl req -new -x509 -days 3650 -nodes -out /etc/ssl/localcerts/nginx_pydio.pem -keyout /etc/ssl/localcerts/nginx_pydio.key

Adjust the permissions:

chmod 600 /etc/ssl/localcerts/*
chown -R www-data:root /etc/ssl/localcerts

Create configuration file:

/etc/nginx/sites-available/pydio.conf

server {
    listen 80;
    listen 443 ssl;

    server_name c.domain.com;
    ssl_certificate     /etc/ssl/localcerts/nginx_pydio.pem;
    ssl_certificate_key /etc/ssl/localcerts/nginx_pydio.key;

    root /usr/share/ajaxplorer/;
    index index.php;

   if ($server_port = 80) {
     rewrite ^ https://$host$request_uri permanent;
   }

client_max_body_size 512M;
access_log /var/log/nginx/c.martin-denizet.com.access.log;
error_log /var/log/nginx/c.martin-denizet.com.error.log;

location / {
}


location ~* \.(?:ico|css|js|gif|jpe?g|png|ttf|woff|svg)$ {
expires max;
add_header Pragma public;
add_header Cache-Control "public, must-revalidate, proxy-revalidate";
}
location ~ \.php {
try_files $uri =404;
fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;
fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  SCRIPT_FILENAME    $request_filename;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;
fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx;
fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;
fastcgi_pass unix:/var/run/php5-fpm.sock;
}


location ~ ^/data/public/.*$ {allow all;}

location ~ ^/(conf|data) {deny all;}
location /robots.txt  { access_log off; log_not_found off; }
location /favicon.ico { access_log off; log_not_found off; }
location ~ /\.          { access_log off; log_not_found off; deny all; }
location ~ ~$           { access_log off; log_not_found off; deny all; }


}

Activate the configuration:

ln -s /etc/nginx/sites-available/pydio.conf /etc/nginx/sites-enabled/pydio.conf
service nginx restart