bcremer / shopware-with-nginx

Running shopware using NGINX
http://shopware.com
BSD 2-Clause "Simplified" License
95 stars 46 forks source link

Is it still recommendable to use SW on Nginx? #31

Closed JesusLeon closed 6 years ago

JesusLeon commented 7 years ago

Hi @bcremer,

nice to find an unofficial repository of configurations for nginx from an official Shopware Tech member.

My question is, even so, do you (or is it) still recommended to use Shopware on Nginx, regardless of the official support? Is it reliable? What are the most common examples of something that can go wrong?

Thanks.

emilv commented 7 years ago

One thing that concerns me is that file access is limited with a blacklist instead of a whitelist. For example, the configuration blocks access to autoload.php but not autload.php.backup.

This is an issue with the Apache .htaccess too. But the issue on Nginx is that it will always lag behind changes to the Apache configuration. If Shopware makes changes to .htaccess you might forget to update your Nginx config.

Ideally it should be more like in Laravel where only a certain folder is accessible at all, say, public/, and only a single file is interpreted as PHP, say, shopware.php. That would allow a safer and also easier web server configuration.

emilv commented 7 years ago

Apart from that, Shopware runs fine on Nginx with the config from this repo.

JesusLeon commented 7 years ago

@emilv good point.