| 1 | daemon on;
|
|---|
| 2 |
|
|---|
| 3 | user www-data www-data;
|
|---|
| 4 | worker_processes auto;
|
|---|
| 5 | worker_rlimit_nofile 32768;
|
|---|
| 6 | error_log /var/log/nginx/error.log;
|
|---|
| 7 |
|
|---|
| 8 | events
|
|---|
| 9 | {
|
|---|
| 10 | use epoll;
|
|---|
| 11 | }
|
|---|
| 12 |
|
|---|
| 13 | http
|
|---|
| 14 | {
|
|---|
| 15 | sendfile on;
|
|---|
| 16 | tcp_nopush on;
|
|---|
| 17 | tcp_nodelay on;
|
|---|
| 18 |
|
|---|
| 19 | include /etc/nginx/mime.types;
|
|---|
| 20 |
|
|---|
| 21 | proxy_cache_path /var/cache/nginx/data levels=1:2 keys_zone=cache1:536870912 max_size=10737418240 inactive=999999m loader_sleep=0 loader_files=10000;
|
|---|
| 22 | proxy_cache cache1;
|
|---|
| 23 | proxy_cache_valid any 10m;
|
|---|
| 24 | proxy_cache_key 1111:0:$uri;
|
|---|
| 25 | proxy_temp_path /var/cache/nginx/tmp;
|
|---|
| 26 | proxy_set_header Host $resource_origin;
|
|---|
| 27 |
|
|---|
| 28 | # SSL
|
|---|
| 29 | ssl_session_cache shared:SSL:40m;
|
|---|
| 30 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|---|
| 31 | ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
|
|---|
| 32 | ssl_prefer_server_ciphers on;
|
|---|
| 33 | ssl_certificate /opt/nginx_ssl/0000000001_35.pem;
|
|---|
| 34 | ssl_certificate_key /opt/nginx_ssl/0000000001_35.key;
|
|---|
| 35 | ssl_dhparam /etc/ssl/certs/dhparam.pem;
|
|---|
| 36 |
|
|---|
| 37 | server {
|
|---|
| 38 | listen 80;
|
|---|
| 39 | listen 443 ssl http2;
|
|---|
| 40 | server_name SERVERNAME;
|
|---|
| 41 | set $upstream "UPSTREAM_IP";
|
|---|
| 42 | set $resource_origin "UPSTREAM_HOST_HEADER";
|
|---|
| 43 | location / {
|
|---|
| 44 | proxy_pass http://$upstream;
|
|---|
| 45 | }
|
|---|
| 46 | }
|
|---|
| 47 | }
|
|---|
