Default page

⚝ One Hat Cyber Team ⚝

Your IP: 192.168.31.6
Server IP: 192.168.1.11
Server: Linux pams 6.1.0-29-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.123-1 (2025-01-02) x86_64
PHP Version: 8.2.28
Buat File | Buat Folder

Edit File: sipadat_miu

server {
    listen 80;
    set_real_ip_from 103.174.116.4;
    server_name sipadatmiu.local.com;

root /var/www/miu/public/;
    index index.php index.html index.htm;

location / {
#        try_files $uri $uri/ =404;
	try_files $uri $uri/ /index.php?$query_string;
    }

location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/run/php/php8.2-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }

location ~ /\.ht {
        deny all;
    }

location ~ /\.env {
        deny all;
    }
    
    access_log /var/www/miu/writable/logs/access.log;
    error_log /var/www/miu/writable/logs/error.log error;
}

server {
    listen 443 ssl http2; # Gunakan http2 untuk performa lebih baik
    server_name sipadatmiu.local.com;

# Lokasi File SSL
    ssl_certificate /var/www/miu/ssl_sipadat.pem; # Ganti dengan path sertifikat Anda
    ssl_certificate_key /var/www/miu/key_sipadat.key; # Ganti dengan path kunci privat Anda

# Pengaturan SSL (Rekomendasi Keamanan)
    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:10m;
    ssl_session_tickets off;

# Harden SSL: Pilih protokol dan cipher suite yang kuat
    ssl_protocols TLSv1.2 TLSv1.3; # Jangan gunakan TLSv1.0, TLSv1.1
    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
    ssl_prefer_server_ciphers on;

# HSTS (HTTP Strict Transport Security)
    # Ini memberi tahu browser untuk selalu menggunakan HTTPS untuk domain Anda
    # max-age=63072000 artinya 2 tahun
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;

# Lokasi root dari file website Anda
    root /var/www/miu/public/;
    index index.html index.htm index.php; # Sesuaikan dengan file indeks Anda

# Pengaturan untuk PHP (jika menggunakan PHP-FPM)
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
	fastcgi_pass unix:/run/php/php8.2-fpm.sock;
    }
    location / {
#        try_files $uri $uri/ =404;
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Pencegahan akses ke file sensitif
    location ~ /\.ht {
        deny all;
    }

# Cache browser untuk file statis
    location ~* \.(jpg|jpeg|gif|png|webp|svg|woff|woff2|ttf|css|js|ico|xml)$ {
        expires 30d;
        add_header Cache-Control "public, no-transform";
    }

# Log Nginx
    access_log /var/www/miu/writable/logs/access.log;
    error_log /var/www/miu/writable/logs/error.log;
}