FuzzyBot: Updating to match new version of source page

2026-08-04T15:35:02Z

Updating to match new version of source page

← Older revision		Revision as of 17:35, 4 August 2026
Line 11:		Line 11:
	listen 80;		listen 80;
	server_name survey.example.com;		server_name survey.example.com;

	# Redirect all HTTP traffic to HTTPS		# Redirect all HTTP traffic to HTTPS
	return 301 https://$host$request_uri;		return 301 https://$host$request_uri;
Line 20:		Line 19:
	server_name survey.example.com;		server_name survey.example.com;

	root /var/www/limesurvey;		root /var/www/limesurvey;
	index index.php;		index index.php;

	# SSL certificates		# SSL certificates
	ssl_certificate /etc/ssl/certs/survey.example.com.crt;		ssl_certificate /etc/ssl/certs/survey.example.com.crt;
	ssl_certificate_key /etc/ssl/private/survey.example.com.key;		ssl_certificate_key /etc/ssl/private/survey.example.com.key;

	# Recommended SSL settings		# Recommended SSL settings
	ssl_protocols TLSv1.2 TLSv1.3;		ssl_protocols TLSv1.2 TLSv1.3;
	ssl_prefer_server_ciphers on;		ssl_prefer_server_ciphers on;

	client_max_body_size 100M;		client_max_body_size 100M;

	access_log /var/log/nginx/limesurvey_access.log;		access_log /var/log/nginx/limesurvey_access.log;
	error_log /var/log/nginx/limesurvey_error.log;		error_log /var/log/nginx/limesurvey_error.log;

	location / {		location / {
	try_files $uri $uri/ /index.php?$args;		try_files $uri $uri/ /index.php?$args;
	}		}

	location ~ \.php$ {		location ~ \.php$ {
	include fastcgi_params;		include fastcgi_params;
	fastcgi_pass unix:/run/php/php8.1-fpm.sock;		fastcgi_pass unix:/run/php/php8.1-fpm.sock;
Line 48:		Line 47:
	}		}

	# Deny access to hidden files and sensitive directories		# Deny access to hidden files and sensitive directories
	location ~ /\.(?!well-known).* {		location ~ /\.(?!well-known).* {
	deny all;		deny all;
	}		}

	location ~* /(application\|protected\|modules\|framework\|db\|application/config)/ {		location ~* /(application\|protected\|modules\|framework\|db\|application/config)/ {
	deny all;		deny all;
	}		}

	location ~* \.(log\|sql\|htaccess)$ {		location ~* \.(log\|sql\|htaccess)$ {
	deny all;		deny all;
	}		}

	# Allow LimeSurvey to serve uploaded files and assets		# Allow LimeSurvey to serve uploaded files and assets
	location /upload/ {		location /upload/ {
	try_files $uri $uri/ =404;		try_files $uri $uri/ =404;
	}		}

	location /tmp/ {		location /tmp/ {
	deny all;		deny all;
	}		}
	}		}
	</syntaxhighlight>		</syntaxhighlight>

	=== Explanation of key directives ===		=== Explanation of key directives ===

FuzzyBot: Updating to match new version of source page

2026-08-04T15:21:03Z

Updating to match new version of source page

New page

<languages />

== Nginx configuration example for LimeSurvey ==

Below is an example configuration for running LimeSurvey with [https://nginx.org/ nginx] and PHP-FPM. Adjust paths, domain names, and PHP-FPM socket/port settings to match your server setup.

'''Note:''' This is a basic example. Always review and adapt it to your own security requirements before using it in production.

<syntaxhighlight lang="nginx">
server {
listen 80;
server_name survey.example.com;

# Redirect all HTTP traffic to HTTPS
return 301 https://$host$request_uri;
}

server {
listen 443 ssl http2;
server_name survey.example.com;

root /var/www/limesurvey;
index index.php;

# SSL certificates
ssl_certificate /etc/ssl/certs/survey.example.com.crt;
ssl_certificate_key /etc/ssl/private/survey.example.com.key;

# Recommended SSL settings
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;

client_max_body_size 100M;

access_log /var/log/nginx/limesurvey_access.log;
error_log /var/log/nginx/limesurvey_error.log;

location / {
try_files $uri $uri/ /index.php?$args;
}

location ~ \.php$ {
include fastcgi_params;
fastcgi_pass unix:/run/php/php8.1-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
}

# Deny access to hidden files and sensitive directories
location ~ /\.(?!well-known).* {
deny all;
}

location ~* /(application|protected|modules|framework|db|application/config)/ {
deny all;
}

location ~* \.(log|sql|htaccess)$ {
deny all;
}

# Allow LimeSurvey to serve uploaded files and assets
location /upload/ {
try_files $uri $uri/ =404;
}

location /tmp/ {
deny all;
}
}
</syntaxhighlight>

=== Explanation of key directives ===

* '''<code>fastcgi_pass</code>''': Points to the PHP-FPM socket or TCP address handling PHP requests. Update this to match your PHP-FPM pool configuration.
* '''<code>try_files</code>''': Ensures URLs are routed correctly through LimeSurvey's front controller (<code>index.php</code>).
* '''<code>client_max_body_size</code>''': Increases the maximum upload size, useful for surveys with file-upload questions.
* '''Deny rules''': Block direct web access to configuration files, logs, and application directories that should never be publicly reachable.

LimeSurvey nginx example configuration/en - Revision history

FuzzyBot: Updating to match new version of source page

FuzzyBot: Updating to match new version of source page