ecaiyanlinux | 113bf09 | 2020-08-01 14:05:17 +0000 | [diff] [blame] | 1 | user www-data; |
| 2 | worker_processes auto; |
| 3 | pid /run/nginx.pid; |
| 4 | include /etc/nginx/modules-enabled/*.conf; |
| 5 | |
| 6 | events { |
| 7 | worker_connections 768; |
| 8 | # multi_accept on; |
| 9 | } |
| 10 | |
| 11 | http { |
| 12 | |
| 13 | ## |
| 14 | # Basic Settings |
| 15 | ## |
| 16 | |
| 17 | sendfile on; |
| 18 | tcp_nopush on; |
| 19 | tcp_nodelay on; |
| 20 | keepalive_timeout 65; |
| 21 | types_hash_max_size 2048; |
| 22 | # server_tokens off; |
| 23 | |
| 24 | # server_names_hash_bucket_size 64; |
| 25 | # server_name_in_redirect off; |
| 26 | |
| 27 | include /etc/nginx/mime.types; |
| 28 | default_type application/octet-stream; |
| 29 | |
| 30 | server { # simple reverse-proxy |
| 31 | listen 8090; |
| 32 | listen [::]:8090; |
| 33 | listen 8091 ssl; |
| 34 | listen [::]:8091 ssl; |
| 35 | server_name localhost; |
| 36 | ssl_certificate /usr/src/app/cert/cert.crt; |
| 37 | ssl_certificate_key /usr/src/app/cert/key.crt; |
| 38 | ssl_password_file /usr/src/app/cert/pass; |
| 39 | |
| 40 | # serve dynamic requests |
| 41 | location / { |
| 42 | proxy_pass http://localhost:2222; |
| 43 | } |
| 44 | } |
| 45 | ## |
| 46 | # SSL Settings |
| 47 | ## |
| 48 | |
| 49 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE |
| 50 | ssl_prefer_server_ciphers on; |
| 51 | |
| 52 | ## |
| 53 | # Logging Settings |
| 54 | ## |
| 55 | |
| 56 | access_log /var/log/nginx/access.log; |
| 57 | error_log /var/log/nginx/error.log; |
| 58 | |
| 59 | ## |
| 60 | # Gzip Settings |
| 61 | ## |
| 62 | |
| 63 | gzip on; |
| 64 | |
| 65 | # gzip_vary on; |
| 66 | # gzip_proxied any; |
| 67 | # gzip_comp_level 6; |
| 68 | # gzip_buffers 16 8k; |
| 69 | # gzip_http_version 1.1; |
| 70 | # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; |
| 71 | |
| 72 | ## |
| 73 | # Virtual Host Configs |
| 74 | ## |
| 75 | |
| 76 | include /etc/nginx/conf.d/*.conf; |
| 77 | include /etc/nginx/sites-enabled/*; |
| 78 | } |
| 79 | |
| 80 | |
| 81 | #mail { |
| 82 | # # See sample authentication script at: |
| 83 | # # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript |
| 84 | # |
| 85 | # # auth_http localhost/auth.php; |
| 86 | # # pop3_capabilities "TOP" "USER"; |
| 87 | # # imap_capabilities "IMAP4rev1" "UIDPLUS"; |
| 88 | # |
| 89 | # server { |
| 90 | # listen localhost:110; |
| 91 | # protocol pop3; |
| 92 | # proxy on; |
| 93 | # } |
| 94 | # |
| 95 | # server { |
| 96 | # listen localhost:143; |
| 97 | # protocol imap; |
| 98 | # proxy on; |
| 99 | # } |
| 100 | #} |