2020-02-18 23:55:06 -05:00
|
|
|
# run nginx in foreground
|
|
|
|
daemon off;
|
|
|
|
|
|
|
|
user root;
|
|
|
|
|
|
|
|
# Set number of worker processes automatically based on number of CPU cores.
|
|
|
|
worker_processes auto;
|
|
|
|
|
|
|
|
# Enables the use of JIT for regular expressions to speed-up their processing.
|
|
|
|
pcre_jit on;
|
|
|
|
|
|
|
|
error_log /data/logs/error.log warn;
|
|
|
|
|
|
|
|
# Includes files with directives to load dynamic modules.
|
|
|
|
include /etc/nginx/modules/*.conf;
|
|
|
|
|
|
|
|
events {
|
|
|
|
worker_connections 1024;
|
|
|
|
}
|
|
|
|
|
|
|
|
http {
|
|
|
|
include /etc/nginx/mime.types;
|
|
|
|
default_type application/octet-stream;
|
|
|
|
sendfile on;
|
|
|
|
server_tokens off;
|
|
|
|
tcp_nopush on;
|
|
|
|
tcp_nodelay on;
|
|
|
|
client_body_temp_path /tmp/nginx/body 1 2;
|
2020-05-10 18:24:02 -04:00
|
|
|
keepalive_timeout 90s;
|
|
|
|
proxy_connect_timeout 90s;
|
|
|
|
proxy_send_timeout 90s;
|
|
|
|
proxy_read_timeout 90s;
|
2020-02-18 23:55:06 -05:00
|
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
gzip on;
|
|
|
|
proxy_ignore_client_abort off;
|
|
|
|
client_max_body_size 2000m;
|
2020-05-10 18:24:02 -04:00
|
|
|
server_names_hash_bucket_size 1024;
|
2020-02-18 23:55:06 -05:00
|
|
|
proxy_http_version 1.1;
|
|
|
|
proxy_set_header X-Forwarded-Scheme $scheme;
|
|
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Accept-Encoding "";
|
|
|
|
proxy_cache off;
|
|
|
|
proxy_cache_path /var/lib/nginx/cache/public levels=1:2 keys_zone=public-cache:30m max_size=192m;
|
|
|
|
proxy_cache_path /var/lib/nginx/cache/private levels=1:2 keys_zone=private-cache:5m max_size=1024m;
|
|
|
|
|
|
|
|
log_format proxy '[$time_local] $upstream_cache_status $upstream_status $status - $request_method $scheme $host "$request_uri" [Client $remote_addr] [Length $body_bytes_sent] [Gzip $gzip_ratio] [Sent-to $server] "$http_user_agent" "$http_referer"';
|
|
|
|
log_format standard '[$time_local] $status - $request_method $scheme $host "$request_uri" [Client $remote_addr] [Length $body_bytes_sent] [Gzip $gzip_ratio] "$http_user_agent" "$http_referer"';
|
|
|
|
|
|
|
|
|
|
|
|
access_log /data/logs/default.log proxy;
|
|
|
|
|
|
|
|
# Dynamically generated resolvers file
|
|
|
|
include /etc/nginx/conf.d/include/resolvers.conf;
|
|
|
|
|
|
|
|
# Default upstream scheme
|
|
|
|
map $host $forward_scheme {
|
|
|
|
default http;
|
|
|
|
}
|
|
|
|
|
|
|
|
# Real IP Determination
|
|
|
|
# Docker subnet:
|
|
|
|
set_real_ip_from 172.0.0.0/8;
|
|
|
|
# NPM generated CDN ip ranges:
|
|
|
|
include conf.d/include/ip_ranges.conf;
|
|
|
|
# always put the following 2 lines after ip subnets:
|
|
|
|
real_ip_header X-Forwarded-For;
|
|
|
|
real_ip_recursive on;
|
|
|
|
|
|
|
|
# Files generated by NPM
|
|
|
|
include /etc/nginx/conf.d/*.conf;
|
|
|
|
include /data/nginx/default_host/*.conf;
|
|
|
|
include /data/nginx/proxy_host/*.conf;
|
|
|
|
include /data/nginx/redirection_host/*.conf;
|
|
|
|
include /data/nginx/dead_host/*.conf;
|
|
|
|
include /data/nginx/temp/*.conf;
|
|
|
|
|
|
|
|
# Custom
|
|
|
|
include /data/nginx/custom/http[.]conf;
|
|
|
|
}
|
|
|
|
|
|
|
|
stream {
|
|
|
|
# Files generated by NPM
|
|
|
|
include /data/nginx/stream/*.conf;
|
|
|
|
}
|
|
|
|
|
|
|
|
# Custom
|
|
|
|
include /data/nginx/custom/root[.]conf;
|