Debian 9 NGINX perfect server questions

Try this one (untested):

Code:

location /squirrelmail {
               root /usr/share/;
               index index.php index.html index.htm;
               location ~ ^/squirrelmail/(.+\.php)$ {
                       try_files $uri =404;
                       root /usr/share/;
                       fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;
                       fastcgi_param HTTPS on; # <-- add this line
                       fastcgi_index index.php;
                       fastcgi_param SCRIPT_FILENAME $request_filename;
                       include /etc/nginx/fastcgi_params;
                       fastcgi_param PATH_INFO $fastcgi_script_name;
                       fastcgi_buffer_size 128k;
                       fastcgi_buffers 256 4k;
                       fastcgi_busy_buffers_size 256k;
                       fastcgi_temp_file_write_size 256k;
                       fastcgi_intercept_errors on;
               }
               location ~* ^/squirrelmail/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
                       root /usr/share/;
               }
        }
        location /webmail {
               rewrite ^/* /squirrelmail last;
        }

There is a checkbox for that on the rewrite tab of websites, alias- and subdomains.

 

You have to add sometext.mydomain.com as aliasdomain to the website if you want to use it with ssl.

 

Domains have to be in the ssl cert to be able to use them with ssl. If all domains are subdomains of the same domain, then you can use a wildcard ssl cert fron any vendor. If the domains are different domains r you want to use letsencrypt with subdomains in ispconfig instead of a wildcard ssl cert, then you'll have to add them to the ssl cert individually, which happens e.g. when you add them as aliasdomain to the website.

 

The apps vhost has no ssl by default. If you want to use https in the apps vhost, then you will have to add a ssl cert and key directive in the apps vhost file.

 

The paas vhost has no ssl at all unless you configure it.