| 1 | load_module /usr/lib64/nginx/modules/ngx_stream_module.so;
|
|---|
| 2 | user nginx;
|
|---|
| 3 | worker_processes 1;
|
|---|
| 4 | error_log /var/log/nginx/error.log;
|
|---|
| 5 | events {
|
|---|
| 6 | worker_connections 100000;
|
|---|
| 7 | }
|
|---|
| 8 |
|
|---|
| 9 | stream {
|
|---|
| 10 |
|
|---|
| 11 | log_format combined_ssl '$remote_addr,$time_local,$ssl_protocol/$ssl_cipher';
|
|---|
| 12 | upstream mosquitto {
|
|---|
| 13 | server localhost:1883;
|
|---|
| 14 | }
|
|---|
| 15 |
|
|---|
| 16 | server {
|
|---|
| 17 | listen 8883 ssl;
|
|---|
| 18 | proxy_pass mosquitto;
|
|---|
| 19 | access_log /var/log/nginx/access.log combined_ssl;
|
|---|
| 20 | ssl_certificate server-in.crt;
|
|---|
| 21 | ssl_certificate_key server-in.key;
|
|---|
| 22 | ssl_client_certificate ca.crt;
|
|---|
| 23 | ssl_verify_client on;
|
|---|
| 24 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|---|
| 25 | ssl_prefer_server_ciphers on;
|
|---|
| 26 | ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA";
|
|---|
| 27 | }
|
|---|
| 28 | }
|
|---|
