orangehrm recommended server config.md

Apache on Ubuntu/Debian;

a2enmod headers
a2enmod rewrite
service apache2 restart

vim /etc/apache2/sites-available/orangehrm.conf
a2ensite orangehrm.conf
service apache2 reload

<Directory /var/www/html/orangehrm>
    Options FollowSymLinks
    AllowOverride All
    Order allow,deny
    allow from all
</Directory>

<VirtualHost orangehrm.example.com:443>
    ServerAdmin [email protected]
    DocumentRoot /var/www/html/orangehrm
    ServerName orangehrm.example.com
    RequestHeader set X-Forwarded-Host orangehrm.example.com
    RewriteEngine On
    RewriteCond %{HTTP_REFERER} !^$
    RewriteCond %{HTTP_REFERER} !^https://orangehrm.example.com [NC]
    RewriteRule "^(.*)$" "-" [F]
</VirtualHost>

<VirtualHost orangehrm.example.com:80>
    ServerAdmin [email protected]
    DocumentRoot /var/www/html/orangehrm
    ServerName orangehrm.example.com
    RequestHeader set X-Forwarded-Host orangehrm.example.com
    RewriteEngine On
    RewriteCond %{HTTP_REFERER} !^$
    RewriteCond %{HTTP_REFERER} !^http://orangehrm.example.com [NC]
    RewriteRule "^(.*)$" "-" [F]
</VirtualHost>

NGINX with PHP FPM

server {
    server_name orangehrm.example.com;

    if ( $host !~* ^(orangehrm.example.com)$ ) {
        return 444;
    }
    if ( $http_host !~* ^(orangehrm.example.com)$ ) {
        return 444;
    }

    valid_referers none blocked server_names
        orangehrm.example.com;

    if ($invalid_referer) {                                                                                                   
        return 403;                                                                                                           
    }
    
    location ~ [^/]\.php(/|$) {
        ## Other FastCGI params
        ## Read more https://www.nginx.com/resources/wiki/start/topics/examples/phpfcgi/

        fastcgi_param HTTP_HOST $http_host;
    }
}