From 00fcd6dd1003d21396660eba2e571c474696223f Mon Sep 17 00:00:00 2001
From: Asif Bacchus <asif@bacchus.cloud>
Date: Thu, 7 Jan 2021 13:31:04 -0700
Subject: [PATCH] refactor(NGINX): move tmp paths to accessible locations for
 limited user

---
 build/config/nginx.conf | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/build/config/nginx.conf b/build/config/nginx.conf
index 871a8ea..5760d5b 100644
--- a/build/config/nginx.conf
+++ b/build/config/nginx.conf
@@ -3,7 +3,7 @@
 #
 
 worker_processes 1;
-pid /etc/nginx/nginx.pid;
+pid /tmp/nginx.pid;
 
 error_log /var/log/nginx/error.log warn;
 
@@ -37,6 +37,13 @@ http {
         'cache="$upstream_cache_status"';
     access_log <ACCESS_LOG_SETTING>;
 
+    # change temp paths so limited user can access them
+    client_body_temp_path /tmp/client_temp;
+    fastcgi_temp_path /tmp/fastcgi_temp;
+    proxy_temp_path /tmp/proxy_temp;
+    scgi_temp_path /tmp/scgi_temp;
+    uwsgi_temp_path /tmp/uwsgi_temp;
+
     # server configuration options
     server_tokens off;
     real_ip_recursive on;