Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Docker Nginx Auto Ssl
Commits
d7530407
Unverified
Commit
d7530407
authored
Nov 11, 2019
by
Jakub Skałecki
Committed by
GitHub
Nov 11, 2019
Browse files
Merge pull request #33 from QuynhVir/master
Add gzip support, some tuning and hide nginx version
parents
968dc6ae
da638c7c
Changes
3
Show whitespace changes
Inline
Side-by-side
nginx.conf
View file @
d7530407
worker_processes
auto
;
worker_rlimit_nofile
100000
;
events
{
events
{
worker_connections
1024
;
worker_connections
4000
;
}
}
http
{
http
{
...
@@ -7,6 +11,10 @@ http {
...
@@ -7,6 +11,10 @@ http {
include
mime.types
;
include
mime.types
;
default_type
application/octet-stream
;
default_type
application/octet-stream
;
sendfile
on
;
sendfile
on
;
tcp_nopush
on
;
tcp_nodelay
on
;
server_tokens
off
;
client_max_body_size
100M
;
include
resty-http.conf
;
include
resty-http.conf
;
...
...
snippets/server-proxy.conf
View file @
d7530407
...
@@ -23,5 +23,36 @@ server {
...
@@ -23,5 +23,36 @@ server {
proxy_set_header
Upgrade
$
http_upgrade
;
proxy_set_header
Upgrade
$
http_upgrade
;
proxy_set_header
Connection
$
connection_upgrade
;
proxy_set_header
Connection
$
connection_upgrade
;
proxy_cache_bypass
$
http_upgrade
;
proxy_cache_bypass
$
http_upgrade
;
client_max_body_size
100
M
;
gzip
on
;
gzip_disable
"msie6"
;
gzip_vary
on
;
gzip_proxied
any
;
gzip_comp_level
6
;
gzip_buffers
16
8
k
;
gzip_http_version
1
.
1
;
gzip_types
application
/
javascript
application
/
rss
+
xml
application
/
vnd
.
ms
-
fontobject
application
/
x
-
font
application
/
x
-
font
-
opentype
application
/
x
-
font
-
otf
application
/
x
-
font
-
truetype
application
/
x
-
font
-
ttf
application
/
x
-
javascript
application
/
xhtml
+
xml
application
/
xml
font
/
opentype
font
/
otf
font
/
ttf
image
/
svg
+
xml
image
/
x
-
icon
text
/
css
text
/
javascript
text
/
plain
text
/
xml
;
}
}
}
}
snippets/ssl.conf
View file @
d7530407
...
@@ -9,8 +9,8 @@ ssl_session_tickets off;
...
@@ -9,8 +9,8 @@ ssl_session_tickets off;
ssl_dhparam
/
etc
/
resty
-
auto
-
ssl
/
dhparam
.
pem
;
ssl_dhparam
/
etc
/
resty
-
auto
-
ssl
/
dhparam
.
pem
;
# intermediate configuration. tweak to your needs.
# intermediate configuration. tweak to your needs.
ssl_protocols
TLSv1
TLSv1
.
1
TLSv1
.
2
;
ssl_protocols
TLSv1
.
2
TLSv1
.
3
;
ssl_ciphers
'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:
ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:
DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS'
;
ssl_ciphers
ECDHE
-
ECDSA
-
AES128
-
GCM
-
SHA256
:
ECDHE
-
RSA
-
AES128
-
GCM
-
SHA256
:
ECDHE
-
ECDSA
-
AES256
-
GCM
-
SHA384
:
ECDHE
-
RSA
-
AES256
-
GCM
-
SHA384
:
ECDHE
-
ECDSA
-
CHACHA20
-
POLY1305
:
ECDHE
-
RSA
-
CHACHA20
-
POLY1305
:
DHE
-
RSA
-
AES128
-
GCM
-
SHA256
:
DHE
-
RSA
-
AES256
-
GCM
-
SHA384
;
ssl_prefer_server_ciphers
on
;
ssl_prefer_server_ciphers
on
;
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment