Matomo: fix use of non-index PHP files

Author: djbe

matomo/Dockerfile

@@ -10,8 +10,7 @@ RUN apk add --no-cache \
 # - crond
 COPY matomo/config/crond/ /etc/crontabs/
 # - nginx
-COPY common/config/nginx/ /etc/nginx/
-COPY matomo/config/nginx/http.d/ /etc/nginx/http.d/
+COPY common/config/nginx matomo/config/nginx /etc/nginx/
 # - s6-overlay
 COPY common/config/s6-overlay matomo/config/s6-overlay /etc/s6-overlay/s6-rc.d/
 # - init

matomo/config/nginx/snippets/fastcgi/config-php.conf

@@ -0,0 +1,23 @@
+# NOTE: different from normal fastcgi, because we need to support non-index.php
+# files. 
+
+# regex to split $uri to $fastcgi_script_name and $fastcgi_path
+fastcgi_split_path_info ^(.+\.php)(/.+)$;
+
+# Check that the PHP script exists before passing it
+try_files $fastcgi_script_name =404;
+
+# Bypass the fact that try_files resets $fastcgi_path_info
+# see: http://trac.nginx.org/nginx/ticket/321
+set $path_info $fastcgi_path_info;
+fastcgi_param PATH_INFO $path_info;
+
+# Prohibit httpoxy: https://httpoxy.org/
+fastcgi_param HTTP_PROXY "";
+
+fastcgi_index index.php;
+include fastcgi.conf;
+
+# Enforce HTTPS (gets lost through chaining proxies)
+fastcgi_param REQUEST_SCHEME https;
+fastcgi_param HTTPS on;