123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184 |
- {% if ansible_prolog -%}
- {% from 'templates/ansible/prolog.j2' import prolog with context %}
- {{ prolog() }}
- {% endif -%}
- user www-data;
- worker_processes {{ nginx_workers }};
- worker_rlimit_nofile 16384;
- events {
-
-
-
- worker_connections 4096;
-
- use epoll;
- }
- pid /var/run/nginx.pid;
- http {
-
-
- server_tokens off;
-
-
-
- keepalive_timeout 60 60;
-
-
- sendfile on;
-
-
- tcp_nopush on;
-
-
-
- tcp_nodelay on;
-
-
- client_max_body_size 4m;
-
-
- large_client_header_buffers 8 8k;
-
-
-
- client_header_buffer_size 4k;
-
- include /etc/nginx/mime.types;
- default_type application/octet-stream;
-
- log_format main '$remote_addr - $remote_user [$time_local] "$request" '
- '$status $body_bytes_sent "$http_referer" '
- '"$http_user_agent" "$http_x_forwarded_for"';
-
-
- access_log /var/log/nginx/access.log;
- error_log /var/log/nginx/error.log;
-
-
- gzip on;
-
- gzip_http_version 1.0;
-
-
-
- gzip_comp_level 5;
-
-
-
- gzip_min_length 256;
-
-
- gzip_proxied any;
-
-
-
-
- gzip_vary on;
-
- gzip_types
- application/atom+xml
- application/javascript
- application/x-javascript
- application/json
- application/rss+xml
- application/vnd.ms-fontobject
- application/x-font-ttf
- application/x-web-app-manifest+json
- application/xhtml+xml
- application/xml
- font/opentype
- image/svg+xml
- image/x-icon
- text/css
- text/plain
- text/x-component;
-
-
-
-
-
-
-
-
-
- ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers RC4:HIGH:!aNULL:!MD5;
- ssl_prefer_server_ciphers on;
-
-
-
-
- ssl_session_cache shared:SSL:10m;
- ssl_session_timeout 10m;
-
-
-
-
-
-
-
-
-
-
-
- include /etc/nginx/conf.d/*.conf;
-
- include /etc/nginx/sites-enabled/*;
- }
|