rwx.work/rtfd
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nginx/configure/unindent

Browse source
This commit is contained in:
Marc Beninca 2019-08-04 17:26:56 +02:00
parent 9677f99790
commit 6ab77b1b4b
1 changed files with 46 additions and 44 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

90
in/public/web/nginx/configure.rst
View file

@ -11,66 +11,68 @@ Configure
worker_processes auto; worker_processes auto;
events { events {
multi_accept off; multi_accept off;
worker_connections 512; worker_connections 512;
} }
http { http {
# General
keepalive_timeout 60; # General
sendfile on;
server_tokens off;
tcp_nopush on;
tcp_nodelay on;
types_hash_max_size 2048;
# Names keepalive_timeout 60;
sendfile on;
server_tokens off;
tcp_nopush on;
tcp_nodelay on;
types_hash_max_size 2048;
server_name_in_redirect off; # Names
server_names_hash_bucket_size 128;
# File types server_name_in_redirect off;
server_names_hash_bucket_size 128;
include /etc/nginx/mime.types; # File types
default_type application/octet-stream;
# Security include /etc/nginx/mime.types;
default_type application/octet-stream;
ssl_buffer_size 8k; # Security
ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA384,ECDHE-ECDSA-AES256-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA,DHE-DSS-AES256-GCM-SHA384,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA256,DHE-DSS-AES256-SHA256,DHE-RSA-AES256-SHA,DHE-DSS-AES256-SHA";
ssl_dhparam /etc/nginx/dhparam;
ssl_ecdh_curve secp384r1;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2;
ssl_session_cache shared:ssl_session_cache:16m;
ssl_session_timeout 15m;
# Log ssl_buffer_size 8k;
ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA384,ECDHE-ECDSA-AES256-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA,DHE-DSS-AES256-GCM-SHA384,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA256,DHE-DSS-AES256-SHA256,DHE-RSA-AES256-SHA,DHE-DSS-AES256-SHA";
ssl_dhparam /etc/nginx/dhparam;
ssl_ecdh_curve secp384r1;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2;
ssl_session_cache shared:ssl_session_cache:16m;
ssl_session_timeout 15m;
access_log /var/log/nginx/access.log; # Log
error_log /var/log/nginx/error.log;
# Compression access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
gzip on; # Compression
gzip_buffers 32 8k;
gzip_comp_level 5;
gzip_http_version 1.1;
gzip_proxied any;
gzip_types *;
gzip_vary off;
# Misc gzip on;
gzip_buffers 32 8k;
gzip_comp_level 5;
gzip_http_version 1.1;
gzip_proxied any;
gzip_types *;
gzip_vary off;
add_header Strict-Transport-Security max-age=31557600; # Misc
client_max_body_size 16m;
index index.html;
proxy_pass_request_body on;
proxy_pass_request_headers on;
proxy_redirect off;
# Includes add_header Strict-Transport-Security max-age=31557600;
client_max_body_size 16m;
index index.html;
proxy_pass_request_body on;
proxy_pass_request_headers on;
proxy_redirect off;
# Includes
include /etc/nginx/sites-enabled/*;
include /etc/nginx/sites-enabled/*;
} }