38 lines
1.1 KiB
Plaintext
38 lines
1.1 KiB
Plaintext
# WordPress COMMON SETTINGS
|
|
# DO NOT MODIFY, ALL CHANGES LOST AFTER UPDATE EasyEngine (ee)
|
|
# Limit access to avoid brute force attack
|
|
location = /wp-login.php {
|
|
limit_req zone=one burst=1 nodelay;
|
|
include fastcgi_params;
|
|
fastcgi_pass php71;
|
|
}
|
|
# Disable wp-config.txt
|
|
location = /wp-config.txt {
|
|
deny all;
|
|
access_log off;
|
|
log_not_found off;
|
|
}
|
|
# Disallow php in upload folder and add webp rewrite
|
|
location /wp-content/uploads/ {
|
|
location ~ \.php$ {
|
|
#Prevent Direct Access Of PHP Files From Web Browsers
|
|
deny all;
|
|
}
|
|
# webp rewrite rules
|
|
location ~ \.(png|jpe?g)$ {
|
|
add_header Vary "Accept-Encoding";
|
|
add_header "Access-Control-Allow-Origin" "*";
|
|
add_header Cache-Control "public, no-transform";
|
|
access_log off;
|
|
log_not_found off;
|
|
expires max;
|
|
try_files $uri$webp_suffix $uri =404;
|
|
}
|
|
}
|
|
# mitigate DoS attack CVE with WordPress script concatenation
|
|
# add the following line to wp-config.php
|
|
# define( 'CONCATENATE_SCRIPTS', false );
|
|
location ~ \/wp-admin\/load-(scripts|styles).php {
|
|
deny all;
|
|
}
|