From e8541ce8bd725464bc23d56c90385bc85f47b788 Mon Sep 17 00:00:00 2001
From: Dominique Roux <dominique.roux4@gmail.com>
Date: Tue, 19 Nov 2019 15:45:02 +0100
Subject: [PATCH] Fixed nginx config for security issue nextcry

---
 files/nextcloud.nginx | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/files/nextcloud.nginx b/files/nextcloud.nginx
index baf2fcc..6c69b14 100644
--- a/files/nextcloud.nginx
+++ b/files/nextcloud.nginx
@@ -56,7 +56,7 @@ server {
     #pagespeed off;
 
     location / {
-        rewrite ^ /index.php$uri;
+        rewrite ^ /index.php;
     }
 
     location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
@@ -68,6 +68,7 @@ server {
 
     location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34])\.php(?:$|/) {
         fastcgi_split_path_info ^(.+\.php)(/.*)$;
+        try_files $fastcgi_script_name =404;
         include fastcgi_params;
         fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
         fastcgi_param PATH_INFO $fastcgi_path_info;