Initial version of nginx parser roundtrip test

certbot-compatibility-test/nginx/nginx-roundtrip-testdata/dokuwiki/dokuwiki.conf

@@ -0,0 +1,30 @@
+include drop.conf;
+
+client_max_body_size 15M;
+client_body_buffer_size 128k;
+location / {
+    try_files $uri $uri/ @dw;
+}
+
+location @dw {
+    rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+    rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+    rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+    rewrite ^/(.*) /doku.php?id=$1 last;
+}
+
+location ~ \.php$ {
+    include fastcgi_params;
+    fastcgi_param HTTPS $php_https;#DW checks $_SERVER['HTTPS']
+    fastcgi_pass unix:/tmp/php5-fpm.sock;
+}
+
+# Block access to data folders
+location ~ /(data|conf|bin|inc)/ {
+deny all;
+}
+
+# Block access to .htaccess files
+location ~ /\.ht {
+deny  all;
+}

certbot-compatibility-test/nginx/nginx-roundtrip-testdata/dokuwiki/drop.conf

@@ -0,0 +1,4 @@
+location = /robots.txt  { access_log off; log_not_found off; }
+location = /favicon.ico { access_log off; log_not_found off; }
+location ~ /\.          { access_log off; log_not_found off; deny all; }
+location ~ ~$           { access_log off; log_not_found off; deny all; }

certbot-compatibility-test/nginx/nginx-roundtrip-testdata/dokuwiki/full.conf

@@ -0,0 +1,61 @@
+server {
+  server_name wiki.ulyaoth.net;
+  listen 80;
+  autoindex off;
+  client_max_body_size 15M;
+  client_body_buffer_size 128k;
+  index index.html index.htm index.php doku.php;
+  access_log  /var/log/nginx/wiki.ulyaoth.net/access.log;
+  error_log  /var/log/nginx/wiki.ulyaoth.net/error.log;
+  root /usr/share/nginx/dokuwiki;
+
+  location / {
+    try_files $uri $uri/ @dokuwiki;
+  }
+
+  location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+    expires 30d;
+  }
+
+  location = /robots.txt  { access_log off; log_not_found off; }
+  location = /favicon.ico { access_log off; log_not_found off; }
+  location ~ /\.          { access_log off; log_not_found off; deny all; }
+  location ~ ~$           { access_log off; log_not_found off; deny all; }
+
+  location @dokuwiki {
+    rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+    rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+    rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+    rewrite ^/(.*) /doku.php?id=$1 last;
+  }
+
+  location ~ \.php$ {
+    try_files $uri =404;
+    fastcgi_pass   unix:/var/run/php-fpm/wiki.ulyaoth.net.sock;
+    fastcgi_index  index.php;
+    fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
+    include /etc/nginx/fastcgi_params;
+    fastcgi_param  QUERY_STRING     $query_string;
+    fastcgi_param  REQUEST_METHOD   $request_method;
+    fastcgi_param  CONTENT_TYPE     $content_type;
+    fastcgi_param  CONTENT_LENGTH   $content_length;
+    fastcgi_intercept_errors        on;
+    fastcgi_ignore_client_abort     off;
+    fastcgi_connect_timeout 60;
+    fastcgi_send_timeout 180;
+    fastcgi_read_timeout 180;
+    fastcgi_buffer_size 128k;
+    fastcgi_buffers 4 256k;
+    fastcgi_busy_buffers_size 256k;
+    fastcgi_temp_file_write_size 256k;
+  }
+
+  location ~ /(data|conf|bin|inc)/ {
+    deny all;
+  }
+
+  location ~ /\.ht {
+    deny  all;
+  }
+
+}

certbot-compatibility-test/nginx/nginx-roundtrip-testdata/dokuwiki/nginx-no-ssl.conf

@@ -0,0 +1,29 @@
+server {
+  server_name wiki.domain.tld;
+  root /var/www/dokuwiki;
+
+  location / {
+    index doku.php;
+    try_files $uri $uri/ @dokuwiki;
+  }
+
+  location ~ ^/lib.*\.(gif|png|ico|jpg)$ {
+    expires 30d;
+  }
+
+  location ^~ /conf/ { return 403; }
+  location ^~ /data/ { return 403; }
+
+  location @dokuwiki {
+    rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
+    rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
+    rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
+    rewrite ^/(.*) /doku.php?id=$1 last;
+  }
+
+  location ~ \.php$ {
+    include fastcgi_params;
+    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+    fastcgi_pass unix:/tmp/phpcgi.socket;
+  }
+}

certbot-compatibility-test/nginx/nginx-roundtrip-testdata/dokuwiki/nginx.conf

@@ -0,0 +1,30 @@
+map $scheme $php_https { default off; https on; }
+
+    server {
+      server_name wiki.host.org
+      root /path/to/dokuwiki;
+      index doku.php;
+      listen 80;
+      #Enforce https for logins, admin
+      if ($args ~* do=(log|admin|profile)) {
+        rewrite ^ https://$host$request_uri? redirect;
+      }
+      include dokuwiki.conf;
+    }
+
+    server {
+      server_name wiki.host.org;
+      root /path/to/dokuwiki;
+      index doku.php;
+      listen 443 ssl;
+      keepalive_requests    10;
+      keepalive_timeout     60 60;
+      ssl_certificate      /etc/ssl/certs/ssl-cert-snakeoil.pem;
+      ssl_certificate_key  /etc/ssl/private/ssl-cert-snakeoil.key;
+      #switch back to plain http for normal view
+
+      if ($args ~* (do=show|^$)){
+        rewrite ^ http://$host$request_uri? redirect;
+      }
+      include dokuwiki.conf;
+    }