location = /roundcubemail { alias /usr/share/roundcubemail/; } location /roundcubemail/ { root /usr/share; index index.php; location ~ ^/roundcubemail/bin/(.+)$ { deny all; } location ~ ^/roundcubemail/plugins/enigma/home/(.+)$ { deny all; } # Define who can access the installer # keep this secured once configured location ~ ^/roundcubemail/installer/(.+\.php)$ { allow 127.0.0.1; allow ::1; deny all; try_files $uri =404; fastcgi_intercept_errors on; include fastcgi_params; fastcgi_param SERVER_NAME $host; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_pass php-fpm; } # Define who can access the Webmail # You can enlarge permissions once configured location ~ ^/roundcubemail/(.+\.php)$ { allow 127.0.0.1; allow ::1; deny all; try_files $uri =404; fastcgi_intercept_errors on; include fastcgi_params; fastcgi_param SERVER_NAME $host; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_pass php-fpm; } }