forked from github/plane
73 lines
2.3 KiB
Nginx Configuration File
73 lines
2.3 KiB
Nginx Configuration File
|
## Version 2018/04/07 - Changelog: https://github.com/linuxserver/docker-letsencrypt/commits/master/root/defaults/nginx.conf
|
||
|
|
|
||
|
|
user abc;
|
||
|
|
worker_processes 4;
|
||
|
|
pid /run/nginx.pid;
|
||
|
|
include /etc/nginx/modules/*.conf;
|
||
|
|
|
||
|
|
events {
|
||
|
|
worker_connections 768;
|
||
|
|
# multi_accept on;
|
||
|
|
}
|
||
|
|
|
||
|
|
http {
|
||
|
|
|
||
|
|
##
|
||
|
|
# Basic Settings
|
||
|
|
##
|
||
|
|
|
||
|
|
sendfile on;
|
||
|
|
tcp_nopush on;
|
||
|
|
tcp_nodelay on;
|
||
|
|
keepalive_timeout 65;
|
||
|
|
types_hash_max_size 2048;
|
||
|
|
variables_hash_max_size 2048;
|
||
|
|
|
||
|
|
# server_tokens off;
|
||
|
|
|
||
|
|
# server_names_hash_bucket_size 64;
|
||
|
|
# server_name_in_redirect off;
|
||
|
|
|
||
|
|
client_max_body_size 0;
|
||
|
|
|
||
|
|
include /etc/nginx/mime.types;
|
||
|
|
default_type application/octet-stream;
|
||
|
|
|
||
|
|
##
|
||
|
|
# Logging Settings
|
||
|
|
##
|
||
|
|
|
||
|
|
access_log /config/log/nginx/access.log;
|
||
|
|
error_log /config/log/nginx/error.log;
|
||
|
|
|
||
|
|
##
|
||
|
|
# Gzip Settings
|
||
|
|
##
|
||
|
|
|
||
|
|
gzip on;
|
||
|
|
gzip_disable "msie6";
|
||
|
|
gzip_vary on;
|
||
|
|
gzip_proxied any;
|
||
|
|
gzip_comp_level 6;
|
||
|
|
gzip_buffers 32 16k;
|
||
|
|
gzip_http_version 1.1;
|
||
|
|
gzip_min_length 250;
|
||
|
|
gzip_types image/jpeg image/bmp image/svg+xml text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript image/x-icon;
|
||
|
|
|
||
|
|
# security headers
|
||
|
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
||
|
|
add_header X-XSS-Protection "1; mode=block" always;
|
||
|
|
add_header X-Content-Type-Options "nosniff" always;
|
||
|
|
add_header Referrer-Policy "no-referrer-when-downgrade" always;
|
||
|
|
add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;
|
||
|
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
|
||
|
|
ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
|
||
|
|
include /etc/nginx/conf.d/*.conf;
|
||
|
|
include /config/nginx/site-confs/*;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
daemon off;
|