From 3b373ecf18d040b31832d26fe6e5277b7a29e4e9 Mon Sep 17 00:00:00 2001
From: Blink1986 <NicoMeier86@googlemail.com>
Date: Tue, 28 Jul 2026 10:15:31 +0000
Subject: [PATCH] Dateien nach "docker/nginx" hochladen

---
 docker/nginx/default.conf | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 docker/nginx/default.conf

diff --git a/docker/nginx/default.conf b/docker/nginx/default.conf
new file mode 100644
index 0000000..f0f2037
--- /dev/null
+++ b/docker/nginx/default.conf
@@ -0,0 +1,35 @@
+server {
+    listen 80;
+    server_name _;
+    root /var/www/html;
+    index index.php index.html;
+
+    # Datenordner (SQLite-Datenbank) niemals über den Browser ausliefern.
+    # Ersetzt die .htaccess-Regel, die unter nginx nicht greift.
+    location ^~ /data/ {
+        deny all;
+        return 404;
+    }
+
+    # Interne PHP-Ordner ebenfalls sperren
+    location ^~ /includes/ {
+        deny all;
+        return 404;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+    }
+
+    location ~ \.php$ {
+        fastcgi_pass php:9000;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+    }
+
+    # Versteckte Dateien (z.B. .htaccess, .git) nicht ausliefern
+    location ~ /\. {
+        deny all;
+    }
+}