Optimizations for Nginx configs

web-apache-mysql/alpine/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/locale">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-mysql/alpine/conf/etc/zabbix/apache_ssl.conf

@@ -5,8 +5,6 @@ Listen 8443
 
 <IfModule mod_ssl.c>
     <VirtualHost *:8443>
-        SSLEngine on
-
         DocumentRoot /usr/share/zabbix/
         ServerName zabbix
         DirectoryIndex index.php
@@ -65,5 +63,13 @@ Listen 8443
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/locale">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>
 </IfModule>

web-apache-mysql/centos/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/locale">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-mysql/centos/conf/etc/zabbix/apache_ssl.conf

@@ -4,8 +4,6 @@ LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
 Listen 8443
 
     <VirtualHost *:8443>
-        SSLEngine on
-
         DocumentRoot /usr/share/zabbix/
         ServerName zabbix
         DirectoryIndex index.php
@@ -64,4 +62,12 @@ Listen 8443
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/locale">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>

web-apache-mysql/ubuntu/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/locale">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-mysql/ubuntu/conf/etc/zabbix/apache_ssl.conf

@@ -4,8 +4,6 @@ LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so
 
 <IfModule mod_ssl.c>
     <VirtualHost *:8443>
-        SSLEngine on
-
         DocumentRoot /usr/share/zabbix/
         ServerName zabbix
         DirectoryIndex index.php
@@ -64,5 +62,13 @@ LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/locale">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>
 </IfModule>

web-apache-pgsql/alpine/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/locale">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-pgsql/alpine/conf/etc/zabbix/apache_ssl.conf

@@ -5,8 +5,6 @@ Listen 8443
 
 <IfModule mod_ssl.c>
     <VirtualHost *:8443>
-        SSLEngine on
-
         DocumentRoot /usr/share/zabbix/
         ServerName zabbix
         DirectoryIndex index.php
@@ -65,5 +63,13 @@ Listen 8443
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/locale">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>
 </IfModule>

web-apache-pgsql/centos/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/locale">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-pgsql/centos/conf/etc/zabbix/apache_ssl.conf

@@ -4,8 +4,6 @@ LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
 Listen 8443
 
     <VirtualHost *:8443>
-        SSLEngine on
-
         DocumentRoot /usr/share/zabbix/
         ServerName zabbix
         DirectoryIndex index.php
@@ -64,4 +62,12 @@ Listen 8443
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/locale">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>

web-apache-pgsql/ubuntu/conf/etc/zabbix/apache.conf

@@ -42,4 +42,12 @@
             Deny from all
         </files>
     </Directory>
+
+    <Directory "/usr/share/zabbix/locale">
+        Require all denied
+        <files *.php>
+            Order deny,allow
+            Deny from all
+        </files>
+    </Directory>
 </VirtualHost>

web-apache-pgsql/ubuntu/conf/etc/zabbix/apache_ssl.conf

@@ -4,8 +4,6 @@ LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so
 
 <IfModule mod_ssl.c>
     <VirtualHost *:8443>
-        SSLEngine on
-
         DocumentRoot /usr/share/zabbix/
         ServerName zabbix
         DirectoryIndex index.php
@@ -64,5 +62,13 @@ LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so
                 Deny from all
             </files>
         </Directory>
+
+        <Directory "/usr/share/zabbix/locale">
+            Require all denied
+            <files *.php>
+                Order deny,allow
+                Deny from all
+            </files>
+        </Directory>
     </VirtualHost>
 </IfModule>

web-nginx-mysql/alpine/conf/etc/zabbix/nginx.conf

@@ -41,7 +41,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-mysql/alpine/conf/etc/zabbix/nginx_ssl.conf

@@ -63,7 +63,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-mysql/centos/conf/etc/zabbix/nginx.conf

@@ -41,7 +41,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-mysql/centos/conf/etc/zabbix/nginx_ssl.conf

@@ -63,7 +63,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-mysql/ubuntu/conf/etc/zabbix/nginx.conf

@@ -41,7 +41,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-mysql/ubuntu/conf/etc/zabbix/nginx_ssl.conf

@@ -63,7 +63,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-pgsql/alpine/conf/etc/zabbix/nginx.conf

@@ -41,7 +41,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-pgsql/alpine/conf/etc/zabbix/nginx_ssl.conf

@@ -63,7 +63,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-pgsql/centos/conf/etc/zabbix/nginx.conf

@@ -41,7 +41,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-pgsql/centos/conf/etc/zabbix/nginx_ssl.conf

@@ -63,7 +63,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-pgsql/ubuntu/conf/etc/zabbix/nginx.conf

@@ -41,7 +41,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }

web-nginx-pgsql/ubuntu/conf/etc/zabbix/nginx_ssl.conf

@@ -63,7 +63,7 @@ server {
         expires 14d;
     }
 
-    location ~ /(app\/|conf[^\.]|include|locale) {
+    location ~ /(app\/|conf[^\.]|include\/|local\/|locale\/) {
         deny all;
         return 404;
     }