From 9bb76f57d55ca5a9e502a34e504a21904d4157a1 Mon Sep 17 00:00:00 2001 From: Luke Hoersten Date: Sun, 18 Jul 2021 17:43:46 -0500 Subject: Tons of updates. --- dendrite/server/templates/nginx.conf.j2 | 42 +++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 dendrite/server/templates/nginx.conf.j2 (limited to 'dendrite/server/templates/nginx.conf.j2') diff --git a/dendrite/server/templates/nginx.conf.j2 b/dendrite/server/templates/nginx.conf.j2 new file mode 100644 index 0000000..2f4c319 --- /dev/null +++ b/dendrite/server/templates/nginx.conf.j2 @@ -0,0 +1,42 @@ +server { + listen 80; + server_name {{nginx_server_name}}; + return 301 https://$host$request_uri; +} + +# Enable SSL session caching for improved performance +ssl_session_cache shared:ssl_session_cache:10m; + +server { + listen {{nginx_server_port}} ssl http2; + server_name {{nginx_server_name}}; + + ssl_certificate {{nginx_ssl_cert}}; + ssl_certificate_key {{nginx_ssl_privkey}}; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + + ssl_ecdh_curve X25519:prime256v1:secp384r1:secp521r1; + ssl_stapling on; + ssl_stapling_verify on; + + gzip_vary on; + gzip_proxied any; + gzip_comp_level 6; + gzip_buffers 16 8k; + gzip_http_version 1.1; + gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript application/activity+json application/atom+xml; + + # the nginx default is 1m, not enough for large media uploads + client_max_body_size 16m; + + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_read_timeout 600; + + location /_matrix { + proxy_pass http://127.0.0.1:{{nginx_proxy_port}}; + } +} -- cgit v1.2.3