Guest User

brainyssl.conf_new

a guest
May 21st, 2026
417
0
Never
7
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 19.34 KB | None | 0 0
  1. #
  2. server {
  3. listen 8000 ssl http2;
  4. server_name _;
  5. set $port_brainy_proxy 8002;
  6.  
  7. #http2 on;
  8. root /usr/local/brainycp;
  9. #pagespeed on;
  10. #pagespeed FileCachePath /var/brainy_pagespeed_cache;
  11.  
  12. ssl_certificate /etc/brainy/ssl/brainy.crt;
  13. ssl_certificate_key /etc/brainy/ssl/brainy.key;
  14. ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  15. ssl_ciphers "HIGH:!RC4:!aNULL:!MD5:!kEDH";
  16. add_header Strict-Transport-Security 'max-age=604800';
  17.  
  18. access_log /usr/local/brainycp/src/compiled/nginxb/vhost_logs/brainy_access;
  19. error_log /usr/local/brainycp/src/compiled/nginxb/vhost_logs/brainy_error;
  20.  
  21. location ~ /api/ {
  22. auth_basic off;
  23. include /usr/local/brainycp/src/compiled/nginxb/conf_add/api_location.conf;
  24. allow 127.0.0.1/32;
  25. deny all;
  26.  
  27. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  28. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainy.sock;
  29. fastcgi_split_path_info ^(.+?\.php)(/.*)?$;
  30. fastcgi_index index.php;
  31. fastcgi_param SCRIPT_FILENAME /usr/local/brainycp$fastcgi_script_name;
  32. fastcgi_param PATH_TRANSLATED /usr/local/brainycp$fastcgi_script_name;
  33. }
  34.  
  35. location ~ /webshell/(?<token>.*)/ {
  36. auth_request @auth;
  37. proxy_set_header X-Real-IP $remote_addr;
  38. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  39. proxy_pass http://127.0.0.1:4200;
  40. proxy_read_timeout 90;
  41. proxy_redirect off;
  42. }
  43.  
  44. location ~ /tmp/backup_replication {
  45. root /etc/brainy/;
  46. }
  47.  
  48. location = @auth {
  49. internal;
  50. proxy_pass_header Authorization;
  51. proxy_pass http://127.0.0.1:$port_brainy_proxy/scripts/confirm_auth.php?token=$token;
  52. # proxy_pass http://$server_addr:$port_brainy_proxy/scripts/confirm_auth.php?token=$token;
  53. proxy_read_timeout 90;
  54. proxy_pass_request_body off;
  55. proxy_set_header Content-Length "";
  56. proxy_set_header X-Original-URI $request_uri;
  57. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  58. proxy_set_header X-Real-IP $remote_addr;
  59. }
  60.  
  61. location /phpmyadmin {
  62. include /etc/sysconfig/brainycp/fw/phpmyadmin/*.conf;
  63. #root /usr/local/brainycp/src/compiled/;
  64. alias /usr/local/brainycp/src/compiled/phpmyadmin;
  65. index index.php index.html index.htm;
  66.  
  67. location ~* ^.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
  68. #alias /usr/local/brainycp/src/compiled/phpmyadmin;
  69. access_log off;
  70. expires 10m;
  71. add_header Cache-Control "public";
  72. add_header X-Proxy-Cache $upstream_cache_status;
  73. }
  74. location ~ ^/phpmyadmin/(.+\.php)$ {
  75. try_files $uri =404;
  76. fastcgi_param SCRIPT_FILENAME $request_filename;
  77. fastcgi_index index.php;
  78. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  79. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainyservice.sock;
  80. fastcgi_connect_timeout 3600;
  81. fastcgi_read_timeout 3600;
  82. fastcgi_send_timeout 3600;
  83. }
  84. }
  85.  
  86.  
  87.  
  88. location /phpMyAdmin {
  89. rewrite ^/* /phpmyadmin last;
  90. }
  91.  
  92.  
  93. #
  94. location /phpmyadmin2 {
  95. #root /usr/local/brainycp/src/compiled/;
  96. alias /usr/local/brainycp/src/compiled/phpmyadmin2;
  97. index index.php index.html index.htm;
  98. location ~* ^.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
  99. #alias /usr/local/brainycp/src/compiled/phpmyadmin;
  100. access_log off;
  101. expires 10m;
  102. add_header Cache-Control "public";
  103. add_header X-Proxy-Cache $upstream_cache_status;
  104. }
  105. location ~ ^/phpmyadmin2/(.+\.php)$ {
  106. try_files $uri =404;
  107. fastcgi_param SCRIPT_FILENAME $request_filename;
  108. fastcgi_index index.php;
  109. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  110. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainyservice.sock;
  111. fastcgi_connect_timeout 3600;
  112. fastcgi_read_timeout 3600;
  113. fastcgi_send_timeout 3600;
  114. }
  115. }
  116. # location /phpsignon {
  117. # rewrite ^/* /phpmyadmin2 last;
  118. # }
  119. location /phpsignon {
  120. alias /usr/local/brainycp/src/compiled/phpmyadmin2;
  121. index index.php index.html index.htm;
  122. location ~* ^.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
  123. #alias /usr/local/brainycp/src/compiled/phpmyadmin;
  124. access_log off;
  125. expires 10m;
  126. add_header Cache-Control "public";
  127. add_header X-Proxy-Cache $upstream_cache_status;
  128. }
  129. location ~ ^/phpsignon/(.+\.php)$ {
  130. try_files $uri =404;
  131. fastcgi_param SCRIPT_FILENAME $request_filename;
  132. fastcgi_index index.php;
  133. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  134. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainyservice.sock;
  135. #fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainy.sock;
  136. fastcgi_connect_timeout 3600;
  137. fastcgi_read_timeout 3600;
  138. fastcgi_send_timeout 3600;
  139. }
  140. }
  141.  
  142. #
  143. location /roundcube {
  144. alias /usr/share/roundcube;
  145. index index.php index.html index.htm;
  146. location ~* ^.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
  147. access_log off;
  148. expires 10m;
  149. add_header Cache-Control "public";
  150. add_header X-Proxy-Cache $upstream_cache_status;
  151. }
  152. location ~ ^/roundcube/(.+\.php)$ {
  153. try_files $uri =404;
  154. fastcgi_param SCRIPT_FILENAME $request_filename;
  155. fastcgi_index index.php;
  156. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  157. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainyservice.sock;
  158. # fastcgi_pass unix:/var/run/brainyphp-fpm/php8-brainyservice.sock;
  159. fastcgi_connect_timeout 3600;
  160. fastcgi_read_timeout 3600;
  161. fastcgi_send_timeout 3600;
  162. }
  163. }
  164.  
  165. location /webmail {
  166. alias /usr/share/roundcube;
  167. index index.php index.html index.htm;
  168. location ~* ^.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt|woff|woff2)$ {
  169. access_log off;
  170. expires 10m;
  171. add_header Cache-Control "public";
  172. add_header X-Proxy-Cache $upstream_cache_status;
  173. }
  174. location ~ ^/webmail/(.+\.php)$ {
  175. try_files $uri =404;
  176. fastcgi_param SCRIPT_FILENAME $request_filename;
  177. fastcgi_index index.php;
  178. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  179. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainyservice.sock;
  180. # fastcgi_pass unix:/var/run/brainyphp-fpm/php8-brainyservice.sock;
  181. fastcgi_connect_timeout 3600;
  182. fastcgi_read_timeout 3600;
  183. fastcgi_send_timeout 3600;
  184. }
  185. }
  186.  
  187.  
  188. #
  189. location /squirrelmail {
  190. alias /usr/share/squirrelmail;
  191. index index.php index.html index.htm;
  192. location ~* ^.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
  193. access_log off;
  194. expires 10m;
  195. add_header Cache-Control "public";
  196. add_header X-Proxy-Cache $upstream_cache_status;
  197. }
  198. location ~ ^/squirrelmail/(.+\.php)$ {
  199. try_files $uri =404;
  200. fastcgi_param SCRIPT_FILENAME $request_filename;
  201. fastcgi_index index.php;
  202. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  203. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainyservice.sock;
  204. fastcgi_param PHP_VALUE "display_errors = Off";
  205. fastcgi_connect_timeout 3600;
  206. fastcgi_read_timeout 3600;
  207. fastcgi_send_timeout 3600;
  208. }
  209. }
  210.  
  211.  
  212. #
  213. location /phpPgAdmin {
  214. include /etc/sysconfig/brainycp/fw/phppgadmin/*.conf;
  215. alias /usr/share/phpPgAdmin;
  216. index index.php index.html index.htm;
  217. location ~* ^.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
  218. access_log off;
  219. expires 10m;
  220. add_header Cache-Control "public";
  221. add_header X-Proxy-Cache $upstream_cache_status;
  222. }
  223. location ~ ^/phpPgAdmin/(.+\.php)$ {
  224. try_files $uri =404;
  225. fastcgi_param SCRIPT_FILENAME $request_filename;
  226. fastcgi_index index.php;
  227. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  228. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainyservice.sock;
  229. # fastcgi_pass unix:/var/run/brainyphp-fpm/php8-brainyservice.sock;
  230. fastcgi_connect_timeout 3600;
  231. fastcgi_read_timeout 3600;
  232. fastcgi_send_timeout 3600;
  233. }
  234. }
  235.  
  236. location /phppgadmin {
  237. rewrite ^/* /phpPgAdmin last;
  238. }
  239.  
  240. location ~* \.(ttf|jpg|jpeg|gif|png|ico|css|bmp|swf|js|txt|tar|avi|zip|tar.gz|pdf|woff[2]?)$ {
  241. root /usr/local/brainycp;
  242. access_log off;
  243. #expires 30d;
  244. #access_log /usr/local/brainycp/src/compiled/nginxb/vhost_logs/brainy_aaaaaaaa;
  245. add_header Cache-Control "public";
  246. }
  247.  
  248. #location ~ /.well-known {
  249. # allow all;
  250. #}
  251.  
  252. # location ~ /plugins/(.*){
  253. # root /usr/local/brainycp;
  254. # index index.php;
  255. # #rewrite ^(.*)$ /index.php?q=$1;
  256. # rewrite ^(.*)$ /index.php?qqq=$1;
  257. # }
  258.  
  259. location ~* robots.txt { root /usr/local/brainycp/src/compiled/nginxb; }
  260.  
  261. #location / {
  262. # proxy_pass http://127.0.0.1:8080;
  263. # proxy_redirect off;
  264. # proxy_force_ranges on;
  265. # proxy_set_header Host $host;
  266. # proxy_set_header X-Real-IP $remote_addr;
  267. # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  268. # client_max_body_size 124m;
  269. # client_body_buffer_size 128k;
  270. #
  271. # proxy_cache one;
  272. # proxy_cache_key "$request_method|$http_if_modified_since|$http_if_none_match|$host|$request_uri";
  273. # #access_log /etc/nginx/vhost_logs/brainte2.shn-host.ru.cache;
  274. #
  275. # proxy_cache_valid 10s;
  276. # proxy_cache_min_uses 2;
  277. # # proxy_cache_lock on;
  278. # # proxy_cache_use_stale error timeout;
  279. # # proxy_cache_use_stale updating http_502 http_504;
  280. #
  281. # limit_conn lone 5;
  282. # # limit_req zone=ltwo burst=10;
  283. #
  284. # proxy_connect_timeout 90;
  285. # proxy_send_timeout 90;
  286. # proxy_read_timeout 90;
  287. # proxy_buffer_size 4k;
  288. # proxy_buffers 8 32k;
  289. # proxy_busy_buffers_size 64k;
  290. # proxy_temp_file_write_size 10m;
  291. #}
  292.  
  293. # =============================================
  294. # СПЕЦРАЛЬНЫЕ LOCATION (elFinder + roundclogin + connector_backup)
  295. # =============================================
  296.  
  297. location ~ /plugins/elFinder-2.1.9/php/connector.minimal.admin.php {
  298. root /usr/local/brainycp;
  299. index index.php;
  300. #if ($access_ipa = 0) { return 404;}
  301. rewrite ^(.*)$ /index.php?qqq=$1;
  302. }
  303.  
  304. location ~ /plugins/elFinder-2.1.9/php/connector.minimal.client.php {
  305. root /usr/local/brainycp;
  306. index index.php;
  307. rewrite ^(.*)$ /index.php?qqq=$1;
  308. }
  309.  
  310. location ~ /plugins/elFinder_backups/php/connector_backup.php {
  311. root /usr/local/brainycp;
  312. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainy.sock;
  313. fastcgi_split_path_info ^(.+?\.php)(/.*)?$;
  314. fastcgi_index index.php;
  315. fastcgi_param SCRIPT_FILENAME /usr/local/brainycp$fastcgi_script_name;
  316. fastcgi_param PATH_TRANSLATED /usr/local/brainycp$fastcgi_script_name;
  317. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  318. }
  319.  
  320. location ~ /lib/roundclogin.php {
  321. root /usr/local/brainycp;
  322. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainy.sock;
  323. fastcgi_split_path_info ^(.+?\.php)(/.*)?$;
  324. fastcgi_index index.php;
  325. fastcgi_param SCRIPT_FILENAME /usr/local/brainycp$fastcgi_script_name;
  326. fastcgi_param PATH_TRANSLATED /usr/local/brainycp$fastcgi_script_name;
  327. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  328. }
  329.  
  330. # =============================================
  331. # РАЗРЕШЁННЫЕ PHP-ФАЙЛЫ (основной location)
  332. # =============================================
  333. location ~ ^/(index\.php|auth\.php|logout\.php|nolicense\.php|ajax\.php|monitor\.php|signon\.php|api/api\.php|phpsignon/ajax\.php|phpsignon/navigation\.php|src/phpseclib2/vendor/autoload\.php|scripts/confirm_auth\.php)$ {
  334. root /usr/local/brainycp;
  335. fastcgi_pass unix:/var/run/brainyphp-fpm/php56-brainy.sock;
  336. fastcgi_split_path_info ^(.+?\.php)(/.*)?$;
  337. fastcgi_index index.php;
  338. fastcgi_param SCRIPT_FILENAME /usr/local/brainycp$fastcgi_script_name;
  339. fastcgi_param PATH_TRANSLATED /usr/local/brainycp$fastcgi_script_name;
  340. include /usr/local/brainycp/src/compiled/nginxb/fastcgi_params;
  341.  
  342. # ======================
  343. # Клиентские ограничения
  344. # ======================
  345. client_max_body_size 2048m;
  346. client_body_buffer_size 256k;
  347.  
  348. # ======================
  349. # FastCGI буферы и временные файлы
  350. # ======================
  351. fastcgi_temp_file_write_size 500m;
  352. fastcgi_buffers 8 32k;
  353. fastcgi_buffer_size 64k;
  354. fastcgi_busy_buffers_size 64k;
  355. fastcgi_temp_path /var/lib/nginxb/fpm/temp 1 2;
  356.  
  357. # ======================
  358. # Таймауты FastCGI
  359. # ======================
  360. fastcgi_connect_timeout 3600;
  361. fastcgi_read_timeout 3600;
  362. fastcgi_send_timeout 3600;
  363.  
  364. # ======================
  365. # Кэширование FastCGI
  366. # ======================
  367. fastcgi_cache off;
  368. fastcgi_cache_key "$request_method|$http_if_modified_since|$http_if_none_match|$host|$request_uri|$cookie_phpsessid";
  369. fastcgi_cache_valid 10s;
  370.  
  371. # ======================
  372. # Заголовки и доп. параметры
  373. # ======================
  374. fastcgi_pass_header Cookie;
  375. fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
  376. add_header X-Proxy-Cache $upstream_cache_status;
  377.  
  378. # ======================
  379. # Ограничение соединений
  380. # ======================
  381. limit_conn lbfcgi 20;
  382. }
  383.  
  384. # =============================================
  385. # ЗАПРЕЩАЕМ ВСЁ ОСТАЛЬНОЕ .php
  386. # =============================================
  387. location ~ \.php$ {
  388. deny all;
  389. access_log off;
  390. }
  391.  
  392.  
  393. #location / {
  394. # root /usr/local/brainycp;
  395. # if (!-e $request_filename) {
  396. # rewrite ^(.+)$ /index.php?q=$1 last;
  397. # }
  398. #}
  399.  
  400. location ~ /\.ht {
  401. deny all;
  402. }
  403.  
  404. location ~ /\.well-known {
  405. allow all;
  406. root /var/www/html;
  407. }
  408.  
  409. location ~* \.conf {
  410. auth_basic off;
  411. allow 127.0.0.1/32;
  412. deny all;
  413. }
  414.  
  415. location ~ /ssh/(.*) {
  416. auth_basic off;
  417. allow 127.0.0.1/32;
  418. deny all;
  419. }
  420.  
  421. location ~ /src/(.*){
  422. auth_basic off;
  423. allow 127.0.0.1/32;
  424. deny all;
  425. }
  426.  
  427. location ~ /conf/(.*){
  428. auth_basic off;
  429. allow 127.0.0.1/32;
  430. deny all;
  431. }
  432.  
  433. location ~ /script/(.*){
  434. auth_basic off;
  435. allow 127.0.0.1/32;
  436. deny all;
  437. }
  438.  
  439. location ~ /data/(.*){
  440. auth_basic off;
  441. allow 127.0.0.1/32;
  442. deny all;
  443. }
  444.  
  445. location ~ /lib/(.*){
  446. auth_basic off;
  447. allow 127.0.0.1/32;
  448. deny all;
  449. }
  450.  
  451. location ~ /plugins/(.*){
  452. auth_basic off;
  453. allow 127.0.0.1/32;
  454. deny all;
  455. }
  456.  
  457. location / {
  458. root /usr/local/brainycp;
  459. index index.php;
  460. try_files $uri $uri/ /index.php?q=$uri&$args;
  461. #rewrite ^(.*)$ /index.php?q=$1;
  462. }
  463.  
  464. error_page 404 /404.html;
  465. location = /40x.html {
  466. }
  467. #error_page 500 502 503 504 /50x.html;
  468. #location = /50x.html {
  469. #}
  470.  
  471. location /webshell {
  472. proxy_ssl_trusted_certificate /var/lib/shellinabox/certificate.pem;
  473. }
  474. }
  475.  
Advertisement
Comments
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • Hytolek
    3 days
    # CSS 0.45 KB | 0 0
    1. ⭐ Changelly Profit Exploit Documentation ⭐
    2.  
    3. https://docs.google.com/document/d/1MzFoZVdCI0pv3Bkf4dAe-WjfaXKLNbI90hzSGKBqn9M/edit?usp=dazbtgzpwh
    4.  
    5. This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
    6.  
    7. The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader.
    8.  
    9. Join our Telegram Channel for more exploits: https://t.me/byprotocol
Add Comment
Please, Sign In to add comment