52 lines
1 KiB
Django/Jinja
52 lines
1 KiB
Django/Jinja
## THIS FILE IS MANAGED USING SALT (state: {{ sls }})
|
|
# /etc/nginx/nginx.conf
|
|
|
|
qworker_processes auto;
|
|
pcre_jit on;
|
|
|
|
error_log {{ log_dir }}/error.log warn;
|
|
|
|
include /etc/nginx/modules/*.conf;
|
|
include /etc/nginx/conf.d/*.conf;
|
|
|
|
events {
|
|
worker_connections 1024;
|
|
}
|
|
|
|
http {
|
|
include /etc/nginx/mime.types;
|
|
default_type application/octet-stream;
|
|
|
|
server_tokens off;
|
|
|
|
client_max_body_size 1m;
|
|
|
|
sendfile on;
|
|
|
|
tcp_nopush on;
|
|
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
ssl_session_cache shared:SSL:2m;
|
|
|
|
ssl_session_timeout 1h;
|
|
|
|
ssl_session_ticketrs off;
|
|
|
|
gzip_vary on;
|
|
|
|
map $http_upgrade $connection_upgrade {
|
|
default upgrade;
|
|
'' close;
|
|
}
|
|
|
|
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
|
'$status $body_bytes_sent "$http_referer" '
|
|
'"$http_user_agent" "$http_x_forwarded_for"';
|
|
|
|
access_log {{ log_dir }}/access.log main;
|
|
|
|
include {{ sites_enabled_dir }}/*.conf;
|
|
}
|