equal
deleted
inserted
replaced
8 |
8 |
9 proxy_cache_path /tmp/{{pleroma_instance}}-pleroma-media-cache levels=1:2 keys_zone={{pleroma_instance}}-pleroma_media_cache:10m max_size=10g |
9 proxy_cache_path /tmp/{{pleroma_instance}}-pleroma-media-cache levels=1:2 keys_zone={{pleroma_instance}}-pleroma_media_cache:10m max_size=10g |
10 inactive=720m use_temp_path=off; |
10 inactive=720m use_temp_path=off; |
11 |
11 |
12 server { |
12 server { |
13 listen {{nginx_port}}; |
13 listen 80; |
14 # listen [::]:{{nginx_port}}; |
|
15 server_name {{nginx_server_name}}; |
14 server_name {{nginx_server_name}}; |
16 return 301 https://$host$request_uri; |
15 return 301 https://$host$request_uri; |
17 } |
16 } |
18 |
17 |
19 # Enable SSL session caching for improved performance |
18 # Enable SSL session caching for improved performance |
20 ssl_session_cache shared:ssl_session_cache:10m; |
19 ssl_session_cache shared:ssl_session_cache:10m; |
21 |
20 |
22 server { |
21 server { |
23 listen {{nginx_ssl_port}} ssl http2; |
22 listen 443 ssl http2; |
24 # listen [::]:{{nginx_ssl_port}} ssl ipv6only=on; |
|
25 server_name {{nginx_server_name}}; |
23 server_name {{nginx_server_name}}; |
26 |
24 |
27 ssl_certificate {{nginx_ssl_cert}}; |
25 ssl_certificate {{nginx_ssl_cert}}; |
28 ssl_certificate_key {{nginx_ssl_privkey}}; |
26 ssl_certificate_key {{nginx_ssl_privkey}}; |
29 ssl_ecdh_curve X25519:prime256v1:secp384r1:secp521r1; |
27 ssl_ecdh_curve X25519:prime256v1:secp384r1:secp521r1; |