101 lines
3.9 KiB
Nginx Configuration File
101 lines
3.9 KiB
Nginx Configuration File
# nginx.conf -- docker-openresty
|
|
#
|
|
# This file is installed to:
|
|
# `/usr/local/openresty/nginx/conf/nginx.conf`
|
|
# and is the file loaded by nginx at startup,
|
|
# unless the user specifies otherwise.
|
|
#
|
|
# It tracks the upstream OpenResty's `nginx.conf`, but removes the `server`
|
|
# section and adds this directive:
|
|
# `include /etc/nginx/conf.d/*.conf;`
|
|
#
|
|
# The `docker-openresty` file `nginx.vh.default.conf` is copied to
|
|
# `/etc/nginx/conf.d/default.conf`. It contains the `server section
|
|
# of the upstream `nginx.conf`.
|
|
#
|
|
# See https://github.com/openresty/docker-openresty/blob/master/README.md#nginx-config-files
|
|
#
|
|
|
|
user www-data;
|
|
worker_processes 4;
|
|
|
|
# Enables the use of JIT for regular expressions to speed-up their processing.
|
|
pcre_jit on;
|
|
|
|
|
|
#error_log logs/error.log;
|
|
#error_log logs/error.log notice;
|
|
#error_log logs/error.log info;
|
|
|
|
pid /var/run/nginx.pid;
|
|
daemon off;
|
|
|
|
worker_rlimit_nofile 65535;
|
|
events {
|
|
use epoll;
|
|
worker_connections 65535;
|
|
multi_accept on;
|
|
accept_mutex on;
|
|
}
|
|
|
|
http {
|
|
include mime.types;
|
|
default_type application/octet-stream;
|
|
|
|
# Enables or disables the use of underscores in client request header fields.
|
|
# When the use of underscores is disabled, request header fields whose names contain underscores are marked as invalid and become subject to the ignore_invalid_headers directive.
|
|
# underscores_in_headers off;
|
|
|
|
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
|
'$status $body_bytes_sent "$http_referer" '
|
|
'"$http_user_agent" "$http_x_forwarded_for" "$host"';
|
|
#access_log logs/access.log main;
|
|
|
|
# Log in JSON Format
|
|
# log_format nginxlog_json escape=json '{ "timestamp": "$time_iso8601", '
|
|
# '"remote_addr": "$remote_addr", '
|
|
# '"body_bytes_sent": $body_bytes_sent, '
|
|
# '"request_time": $request_time, '
|
|
# '"response_status": $status, '
|
|
# '"request": "$request", '
|
|
# '"request_method": "$request_method", '
|
|
# '"host": "$host",'
|
|
# '"upstream_addr": "$upstream_addr",'
|
|
# '"http_x_forwarded_for": "$http_x_forwarded_for",'
|
|
# '"http_referrer": "$http_referer", '
|
|
# '"http_user_agent": "$http_user_agent", '
|
|
# '"http_version": "$server_protocol", '
|
|
# '"nginx_access": true }';
|
|
# access_log /dev/stdout nginxlog_json;
|
|
|
|
# See Move default writable paths to a dedicated directory (#119)
|
|
# https://github.com/openresty/docker-openresty/issues/119
|
|
client_body_temp_path /var/run/openresty/nginx-client-body;
|
|
proxy_temp_path /var/run/openresty/nginx-proxy;
|
|
fastcgi_temp_path /var/run/openresty/nginx-fastcgi;
|
|
uwsgi_temp_path /var/run/openresty/nginx-uwsgi;
|
|
scgi_temp_path /var/run/openresty/nginx-scgi;
|
|
|
|
sendfile on;
|
|
tcp_nopush on;
|
|
tcp_nodelay on;
|
|
|
|
#keepalive_timeout 0;
|
|
keepalive_timeout 65;
|
|
types_hash_max_size 2048;
|
|
client_max_body_size 128M;
|
|
|
|
gzip on;
|
|
gzip_disable "msie6";
|
|
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|
ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
|
|
|
|
include /etc/nginx/conf.d/*.conf;
|
|
include /etc/nginx/sites-available/*.conf;
|
|
|
|
# Don't reveal OpenResty version to clients.
|
|
server_tokens off;
|
|
charset UTF-8;
|
|
}
|