| 1 | # For more information on configuration, see:
|
|---|
| 2 | # * Official English Documentation: http://nginx.org/en/docs/
|
|---|
| 3 | # * Official Russian Documentation: http://nginx.org/ru/docs/
|
|---|
| 4 |
|
|---|
| 5 | user nginx;
|
|---|
| 6 | worker_processes 1;
|
|---|
| 7 |
|
|---|
| 8 | error_log /var/log/nginx/error.log warn;
|
|---|
| 9 | #error_log /var/log/nginx/error.log notice;
|
|---|
| 10 | #error_log /var/log/nginx/error.log info;
|
|---|
| 11 |
|
|---|
| 12 | pid /var/run/nginx.pid;
|
|---|
| 13 |
|
|---|
| 14 |
|
|---|
| 15 | events {
|
|---|
| 16 | worker_connections 1024;
|
|---|
| 17 | }
|
|---|
| 18 |
|
|---|
| 19 |
|
|---|
| 20 | #
|
|---|
| 21 | # Server config for forwarding secured POP3/IMAP connections to the Zarafa Gateway
|
|---|
| 22 | #
|
|---|
| 23 |
|
|---|
| 24 | mail {
|
|---|
| 25 | auth_http 127.0.0.1:12345/cgi-bin/auth.cgi;
|
|---|
| 26 |
|
|---|
| 27 | ssl_certificate /etc/pki/tls/certs/mycert.pem;
|
|---|
| 28 | ssl_certificate_key /etc/pki/tls/private/myprivkey.pem;
|
|---|
| 29 |
|
|---|
| 30 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|---|
| 31 | ssl_ciphers EECDH+AESGCM:EDH+AESGCM:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4;
|
|---|
| 32 |
|
|---|
| 33 | ssl_dhparam /etc/pki/tls/certs/dhparam.pem;
|
|---|
| 34 |
|
|---|
| 35 | ssl_prefer_server_ciphers on;
|
|---|
| 36 | ssl_session_timeout 5m;
|
|---|
| 37 | ssl_session_cache shared:nginx_cache_mail:16m;
|
|---|
| 38 |
|
|---|
| 39 | server {
|
|---|
| 40 | listen 110; #POP3 STARTTLS
|
|---|
| 41 |
|
|---|
| 42 | starttls only;
|
|---|
| 43 | }
|
|---|
| 44 |
|
|---|
| 45 | server {
|
|---|
| 46 | listen 143; #IMAP STARTTLS
|
|---|
| 47 |
|
|---|
| 48 | starttls only;
|
|---|
| 49 | }
|
|---|
| 50 |
|
|---|
| 51 | server {
|
|---|
| 52 | listen 993; #IMAP SSL
|
|---|
| 53 |
|
|---|
| 54 | ssl on;
|
|---|
| 55 | }
|
|---|
| 56 |
|
|---|
| 57 | server {
|
|---|
| 58 | listen 995; #POP3 SSL
|
|---|
| 59 |
|
|---|
| 60 | ssl on;
|
|---|
| 61 | }
|
|---|
| 62 |
|
|---|
| 63 | }
|
|---|
| 64 |
|
|---|
| 65 | http {
|
|---|
| 66 |
|
|---|
| 67 | ssl_certificate /etc/pki/tls/certs/mycert.pem
|
|---|
| 68 | ssl_certificate_key /etc/pki/tls/private/myprivkey.pem;
|
|---|
| 69 |
|
|---|
| 70 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|---|
| 71 | ssl_ciphers EECDH+AESGCM:EDH+AESGCM:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4;
|
|---|
| 72 |
|
|---|
| 73 | ssl_dhparam /etc/pki/tls/certs/dhparam.pem;
|
|---|
| 74 |
|
|---|
| 75 | ssl_prefer_server_ciphers on;
|
|---|
| 76 | ssl_session_timeout 5m;
|
|---|
| 77 |
|
|---|
| 78 | ssl_session_cache shared:nginx_cache:16m;
|
|---|
| 79 | server {
|
|---|
| 80 |
|
|---|
| 81 | ssl on;
|
|---|
| 82 | listen 443;
|
|---|
| 83 | add_header Strict-Transport-Security max-age=15768000;
|
|---|
| 84 |
|
|---|
| 85 | location / {
|
|---|
| 86 | root /var/www/html;
|
|---|
| 87 | }
|
|---|
| 88 | }
|
|---|
| 89 |
|
|---|
| 90 | }
|
|---|
| 91 | ------WebKitFormBoundaryVseDAl7oqJDLORxg
|
|---|
| 92 | Content-Disposition: form-data; name="description"
|
|---|
| 93 |
|
|---|
| 94 | Config for the bug |
|---|