runtime/etc/nginx.conf

85 lines
2.3 KiB
Nginx Configuration File

worker_processes 1;
error_log stderr;
pid /srv/run/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
access_log off;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
# spool uploads to disk instead of clobbering downstream servers
client_body_temp_path /srv/var/nginx/client-body 1 2;
client_max_body_size 2g;
client_body_buffer_size 128k;
server_names_hash_max_size 4096;
server_names_hash_bucket_size 512;
server_tokens off;
sendfile on;
tcp_nopush on;
tcp_nodelay off;
keepalive_timeout 5;
## Compression
gzip on;
gzip_http_version 1.0;
gzip_comp_level 2;
gzip_proxied any;
gzip_min_length 1100;
gzip_buffers 16 8k;
gzip_types text/xml text/plain text/css application/x-javascript application/xml application/xml+rss text/javascript application/json;#text/html
# Some version of IE 6 don't handle compression well on some mime-types,
# so just disable for them
gzip_disable "MSIE [1-6].(?!.*SV1)";
# Set a vary header so downstream proxies don't send cached gzipped
# content to IE6
gzip_vary on;
# proxy settings
set_real_ip_from 83.167.253.64/27;
set_real_ip_from 10.0.0.0/8;
set_real_ip_from 2a01:430:225::/64;
real_ip_header X-Real-IP;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Real-Port $remote_port;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_max_temp_file_size 0;
proxy_connect_timeout 600;
proxy_send_timeout 600;
proxy_read_timeout 600;
proxy_buffer_size 512k;
proxy_buffers 4 512k;
proxy_busy_buffers_size 512k;
proxy_temp_file_write_size 512k;
proxy_temp_path /srv/var/nginx/cache/;
map $http_x_forwarded_proto $thescheme {
default $scheme;
https https;
}
proxy_set_header X-Forwarded-Proto $thescheme;
include /srv/conf/nginx.d/*;
}