github.com/EngineerKamesh/gofullstack@v0.0.0-20180609171605-d41341d7d4ee/volume4/section3/gopherface/config/nginx.conf (about)

     1  user nginx;
     2  worker_processes  1;
     3  
     4  error_log  /var/log/nginx/error.log warn;
     5  pid        /var/run/nginx.pid;
     6  
     7  events {
     8      worker_connections  1024;
     9  }
    10  
    11  http {
    12      include       /etc/nginx/mime.types;
    13      default_type  application/octet-stream;
    14  
    15      log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    16                        '$status $body_bytes_sent "$http_referer" '
    17                        '"$http_user_agent" "$http_x_forwarded_for"';
    18  
    19      sendfile        on;
    20      keepalive_timeout  65;
    21  
    22      gzip  on;
    23  	gzip_min_length  1100;
    24  	gzip_buffers  16 8k;
    25  	gzip_types    text/plain application/javascript text/css;
    26  	gzip_vary on;
    27  	gzip_comp_level  9;
    28  
    29  	server_tokens off;
    30  
    31  	server {
    32  		listen 80;
    33  		return 301 https://gopherface.kamesh.com$request_uri;
    34  	}
    35  
    36      server {
    37  		listen       443 ssl;
    38  
    39          ssl_certificate		/etc/nginx/certs/gopherfacecert.pem;
    40          ssl_certificate_key	/etc/nginx/certs/gopherfacekey.pem;
    41  
    42          ssl_session_cache    shared:SSL:1m;
    43          ssl_session_timeout  5m;
    44  		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    45  		ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4;
    46  		ssl_prefer_server_ciphers   on;
    47  
    48  		access_log	/var/log/nginx/ssl_access.log  main;
    49  		error_log	/var/log/nginx/ssl_error.log;
    50  
    51  		location / {
    52  			proxy_pass http://webapp:8080/;
    53  			proxy_set_header X-Forwarded-For $remote_addr;
    54  			proxy_http_version 1.1;
    55  			proxy_set_header Upgrade $http_upgrade;
    56  			proxy_set_header Connection "upgrade";
    57  			proxy_set_header Host $host;
    58  		}
    59      }
    60  }