|
@ -20,7 +20,7 @@ http { |
|
|
|
|
|
|
|
|
sendfile on; |
|
|
sendfile on; |
|
|
keepalive_timeout 0; |
|
|
keepalive_timeout 0; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
client_body_buffer_size 10K; |
|
|
client_body_buffer_size 10K; |
|
|
client_header_buffer_size 1k; |
|
|
client_header_buffer_size 1k; |
|
|
client_max_body_size 1G; |
|
|
client_max_body_size 1G; |
|
@ -31,9 +31,10 @@ http { |
|
|
gzip_vary on; |
|
|
gzip_vary on; |
|
|
gzip_comp_level 1; |
|
|
gzip_comp_level 1; |
|
|
gzip_proxied any; |
|
|
gzip_proxied any; |
|
|
|
|
|
|
|
|
|
|
|
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript image/svg+xml; |
|
|
|
|
|
|
|
|
root /www; |
|
|
root /www; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
server { |
|
|
server { |
|
|
listen 80 default_server; |
|
|
listen 80 default_server; |
|
|
listen [::]:80 default_server; |
|
|
listen [::]:80 default_server; |
|
@ -45,7 +46,7 @@ http { |
|
|
listen 443 ssl default_server; |
|
|
listen 443 ssl default_server; |
|
|
listen [::]:443 ssl default_server; |
|
|
listen [::]:443 ssl default_server; |
|
|
server_name localhost; |
|
|
server_name localhost; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; |
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; |
|
|
ssl_prefer_server_ciphers on; |
|
|
ssl_prefer_server_ciphers on; |
|
|
ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:DHE+AESGCM:DHE:!RSA!aNULL:!eNULL:!LOW:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!CAMELLIA:!SEED"; |
|
|
ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:DHE+AESGCM:DHE:!RSA!aNULL:!eNULL:!LOW:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!CAMELLIA:!SEED"; |
|
@ -53,7 +54,7 @@ http { |
|
|
|
|
|
|
|
|
ssl_certificate /etc/nginx/nginx.cer; |
|
|
ssl_certificate /etc/nginx/nginx.cer; |
|
|
ssl_certificate_key /etc/nginx/nginx.key; |
|
|
ssl_certificate_key /etc/nginx/nginx.key; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
location ~* .(jpg|jpeg|png|gif|ico|css|js)$ { |
|
|
location ~* .(jpg|jpeg|png|gif|ico|css|js)$ { |
|
|
expires 365d; |
|
|
expires 365d; |
|
|
} |
|
|
} |
|
|