worker_processes 1; error_log stderr; pid /srv/run/nginx.pid; include /etc/nginx/modules-enabled/*.conf; events { worker_connections 1024; } http { include mime.types; default_type application/octet-stream; access_log off; #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"'; # spool uploads to disk instead of clobbering downstream servers client_body_temp_path /srv/var/nginx/client-body 1 2; client_max_body_size 2g; client_body_buffer_size 128k; server_names_hash_max_size 4096; server_names_hash_bucket_size 512; server_tokens off; sendfile on; tcp_nopush on; tcp_nodelay off; keepalive_timeout 5; ## Compression gzip on; gzip_http_version 1.0; gzip_comp_level 2; gzip_proxied any; gzip_min_length 1100; gzip_buffers 16 8k; gzip_types text/xml text/plain text/css application/x-javascript application/xml application/xml+rss text/javascript application/json;#text/html # Some version of IE 6 don't handle compression well on some mime-types, # so just disable for them gzip_disable "MSIE [1-6].(?!.*SV1)"; # Set a vary header so downstream proxies don't send cached gzipped # content to IE6 gzip_vary on; # proxy settings set_real_ip_from 83.167.253.64/27; set_real_ip_from 10.0.0.0/8; set_real_ip_from 2a01:430:225::/64; real_ip_header X-Real-IP; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-Port $remote_port; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_max_temp_file_size 0; proxy_connect_timeout 600; proxy_send_timeout 600; proxy_read_timeout 600; proxy_buffer_size 512k; proxy_buffers 4 512k; proxy_busy_buffers_size 512k; proxy_temp_file_write_size 512k; proxy_temp_path /srv/var/nginx/cache/; map $http_x_forwarded_proto $thescheme { default $scheme; https https; } proxy_set_header X-Forwarded-Proto $thescheme; include /srv/conf/nginx.d/*; } include /srv/conf/nginx.main.d/*;