nginx/nginx.conf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log notice;
pid /run/nginx.pid;
include /usr/share/nginx/modules/*.conf;

events {
	worker_connections 1024;
}

http {
	aio threads;
	tcp_nopush on;
	server_tokens off;
	http2 on;

	gzip on;
	gunzip on;
	gzip_vary on;
	gzip_types text/plain text/css application/json application/javascript text/javascript;

	map $http_upgrade $connection_upgrade {
		default upgrade;
		'' close;
	}

	proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=pcache:32m max_size=20g;
	ssl_session_cache shared:SSL:10m;

	ssl_protocols TLSv1.2 TLSv1.3;
	ssl_stapling on;
	ssl_stapling_verify on;
	ssl_prefer_server_ciphers on;

	resolver 127.0.0.53;

	# dummy host
	server {
		listen 443 quic reuseport default_server;
		listen 443 ssl reuseport default_server;
		server_name _;
		ssl_certificate /etc/tls/mia.jetzt.crt;
		ssl_certificate_key /etc/tls/mia.jetzt.key;
	}

	%SERVERS%
}