github.com/EngineerKamesh/gofullstack@v0.0.0-20180609171605-d41341d7d4ee/volume4/section3/gopherface/config/nginx.conf (about) 1 user nginx; 2 worker_processes 1; 3 4 error_log /var/log/nginx/error.log warn; 5 pid /var/run/nginx.pid; 6 7 events { 8 worker_connections 1024; 9 } 10 11 http { 12 include /etc/nginx/mime.types; 13 default_type application/octet-stream; 14 15 log_format main '$remote_addr - $remote_user [$time_local] "$request" ' 16 '$status $body_bytes_sent "$http_referer" ' 17 '"$http_user_agent" "$http_x_forwarded_for"'; 18 19 sendfile on; 20 keepalive_timeout 65; 21 22 gzip on; 23 gzip_min_length 1100; 24 gzip_buffers 16 8k; 25 gzip_types text/plain application/javascript text/css; 26 gzip_vary on; 27 gzip_comp_level 9; 28 29 server_tokens off; 30 31 server { 32 listen 80; 33 return 301 https://gopherface.kamesh.com$request_uri; 34 } 35 36 server { 37 listen 443 ssl; 38 39 ssl_certificate /etc/nginx/certs/gopherfacecert.pem; 40 ssl_certificate_key /etc/nginx/certs/gopherfacekey.pem; 41 42 ssl_session_cache shared:SSL:1m; 43 ssl_session_timeout 5m; 44 ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 45 ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4; 46 ssl_prefer_server_ciphers on; 47 48 access_log /var/log/nginx/ssl_access.log main; 49 error_log /var/log/nginx/ssl_error.log; 50 51 location / { 52 proxy_pass http://webapp:8080/; 53 proxy_set_header X-Forwarded-For $remote_addr; 54 proxy_http_version 1.1; 55 proxy_set_header Upgrade $http_upgrade; 56 proxy_set_header Connection "upgrade"; 57 proxy_set_header Host $host; 58 } 59 } 60 }