]>
Commit | Line | Data |
---|---|---|
1 | user www-data; | |
2 | worker_processes auto; | |
3 | worker_rlimit_nofile 40000; | |
4 | pid /run/nginx.pid; | |
5 | include /etc/nginx/modules-enabled/*.conf; | |
6 | ||
7 | events { | |
8 | worker_connections 2048; | |
9 | multi_accept on; | |
10 | use epoll; | |
11 | ||
12 | } | |
13 | ||
14 | http { | |
15 | ssl_session_cache shared:SSL:5m; | |
16 | ssl_session_timeout 12h; | |
17 | ssl_session_tickets off; | |
18 | ||
19 | ## | |
20 | # Basic Settings | |
21 | ## | |
22 | ||
23 | sendfile on; | |
24 | tcp_nopush on; | |
25 | tcp_nodelay on; | |
26 | keepalive_timeout 10; | |
27 | types_hash_max_size 2048; | |
28 | server_tokens off; | |
29 | client_max_body_size 128m; | |
30 | ||
31 | ## | |
32 | # Mime Settings | |
33 | ## | |
34 | ||
35 | include /etc/nginx/mime.types; | |
36 | default_type application/octet-stream; | |
37 | ||
38 | ## | |
39 | # SSL Settings | |
40 | ## | |
41 | ||
42 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE | |
43 | ssl_prefer_server_ciphers on; | |
44 | ||
45 | ## | |
46 | # Logging Settings | |
47 | ## | |
48 | ||
49 | #access_log /var/log/nginx/access.log; | |
50 | #error_log /var/log/nginx/error.log; | |
51 | error_log off; | |
52 | access_log off; | |
53 | ||
54 | ## | |
55 | # Gzip Settings | |
56 | ## | |
57 | ||
58 | #gzip off; | |
59 | #gzip_vary on; | |
60 | #gzip_proxied any; | |
61 | #gzip_comp_level 6; | |
62 | #gzip_buffers 16 8k; | |
63 | #gzip_http_version 1.1; | |
64 | #gzip_types application/javascript application/rss+xml application/vnd.ms-fontobject application/x-font application/x-font-opentype application/x-font-otf application/x-font-truetype application/x-font-ttf application/x-javascript application/xhtml+xml application/xml font/opentype font/otf font/ttf image/svg+xml image/x-icon text/css text/javascript text/xml; | |
65 | ||
66 | ## | |
67 | # Virtual Host Configs | |
68 | ## | |
69 | ||
70 | include /etc/nginx/conf.d/*.conf; | |
71 | include /etc/nginx/sites-enabled/*; | |
72 | } |