|
1 user www-data; |
|
2 worker_processes auto; |
|
3 pid /run/nginx.pid; |
|
4 include /etc/nginx/modules-enabled/*.conf; |
|
5 |
|
6 events { |
|
7 worker_connections 768; |
|
8 # multi_accept on; |
|
9 } |
|
10 |
|
11 http { |
|
12 |
|
13 ## |
|
14 # Basic Settings |
|
15 ## |
|
16 |
|
17 sendfile on; |
|
18 tcp_nopush on; |
|
19 tcp_nodelay on; |
|
20 keepalive_timeout 65; |
|
21 types_hash_max_size 2048; |
|
22 # server_tokens off; |
|
23 |
|
24 # server_names_hash_bucket_size 64; |
|
25 # server_name_in_redirect off; |
|
26 |
|
27 include /etc/nginx/mime.types; |
|
28 default_type application/octet-stream; |
|
29 |
|
30 ## |
|
31 # SSL Settings |
|
32 ## |
|
33 |
|
34 ssl_protocols TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE |
|
35 ssl_prefer_server_ciphers on; |
|
36 |
|
37 ## |
|
38 # Logging Settings |
|
39 ## |
|
40 |
|
41 access_log /var/log/nginx/access.log; |
|
42 error_log /var/log/nginx/error.log; |
|
43 |
|
44 ## |
|
45 # Gzip Settings |
|
46 ## |
|
47 |
|
48 gzip on; |
|
49 |
|
50 gzip_vary on; |
|
51 gzip_proxied any; |
|
52 gzip_comp_level 6; |
|
53 gzip_buffers 16 8k; |
|
54 gzip_http_version 1.1; |
|
55 gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; |
|
56 |
|
57 ## |
|
58 # Virtual Host Configs |
|
59 ## |
|
60 |
|
61 include /etc/nginx/conf.d/*.conf; |
|
62 include /etc/nginx/sites-enabled/*; |
|
63 } |
|
64 |
|
65 stream { |
|
66 ssl_protocols TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE |
|
67 ssl_prefer_server_ciphers on; |
|
68 |
|
69 include /etc/nginx/streams-enabled/*; |
|
70 } |
|
71 |
|
72 #mail { |
|
73 # # See sample authentication script at: |
|
74 # # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript |
|
75 # |
|
76 # # auth_http localhost/auth.php; |
|
77 # # pop3_capabilities "TOP" "USER"; |
|
78 # # imap_capabilities "IMAP4rev1" "UIDPLUS"; |
|
79 # |
|
80 # server { |
|
81 # listen localhost:110; |
|
82 # protocol pop3; |
|
83 # proxy on; |
|
84 # } |
|
85 # |
|
86 # server { |
|
87 # listen localhost:143; |
|
88 # protocol imap; |
|
89 # proxy on; |
|
90 # } |
|
91 #} |