Talk:Roundcube

We should alert users that defining open_basedir in this way causes the restriction to be applied to other php pages that are run through the same PHP-FPM pool, and not only to the pages under /webmail —This unsigned comment is by AlphaJack (talk) 19:27, 25 July 2020‎ (UTC). Please sign your posts with ~~~~!Reply

Now the nginx config is out of date, no webmail anymore —This unsigned comment is by Malacology (talk) 2022年05月02日T11:31:25. Please sign your posts with ~~~~!

https://github.com/roundcube/roundcubemail/releases/tag/1.7.0

Had to change my nginx config for roundcube available at a /webmail URL under a shared domain this way: https://gitlab.com/C0rn3j/configs/-/commit/c8c37d78dcd51de0bfbdbf91652580f601d82af9

The example configs should be reworked to accommodate this change, note that the web requests do not end with just something.php anymore, and can look like this when getting the resources: static.php/program/js/app.min.js

This means there's now also no need for additional protection of files/directories since root dir is no longer accessed.

C0rn3j (talk) 09:14, 12 May 2026 (UTC) Reply

Thanks for the tip. I tried using the example from the link you cite, but I am stuck with a "403 Forbidden" error. Did you need some extra config or should it be straitforward ? In the meantime, I managed to make it work on a subdomain root by using the example given in Roundcube documentation. TcCoy (talk) 21:18, 12 May 2026 (UTC) Reply

The linked commit was all the changes needed for my existing setup to work (sans applying new Roundcube DB migrations). C0rn3j (talk) 21:46, 12 May 2026 (UTC) Reply

Ok, I finally foud that my config was missing the index index.php; line in the server {} block before the modified location {} block. Everything is back to normal, thank you. TcCoy (talk) 12:25, 15 May 2026 (UTC) Reply