# BastionGuard WebUI - Nginx + PHP-FPM
# Install location: /usr/share/BastionGuard/webui
# Copy into /etc/nginx/conf.d/bastionguard-webui.conf or include from your server block.
# Adjust fastcgi_pass for your distro:
#   Arch:          unix:/run/php-fpm/php-fpm.sock;
#   Debian/Ubuntu: unix:/run/php/php-fpm.sock; or unix:/run/php/php8.3-fpm.sock;
#   Fedora/RHEL:   unix:/run/php-fpm/www.sock;

location = /bastionguard {
    return 301 /bastionguard/;
}

location ^~ /bastionguard/ {
    alias /usr/share/BastionGuard/webui/;
    index index.php;
    try_files $uri $uri/ /bastionguard/index.php?$query_string;

    location ~ ^/bastionguard/(data|db|scripts)(/|$) {
        deny all;
    }

    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $request_filename;
        fastcgi_param DOCUMENT_ROOT /usr/share/BastionGuard/webui;
        fastcgi_param HTTPS $https if_not_empty;
        fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
    }
}