|
0
|
1 worker_processes auto;
|
|
|
2 error_log stderr warn;
|
|
|
3 pid /run/nginx.pid;
|
|
|
4
|
|
|
5 events {
|
|
|
6 worker_connections 64;
|
|
|
7 }
|
|
|
8
|
|
|
9 http {
|
|
|
10 include mime.types;
|
|
|
11 default_type application/octet-stream;
|
|
|
12
|
|
|
13 # Define custom log format to include reponse times
|
|
|
14 log_format main_timed '$remote_addr - $remote_user [$time_local] "$request" '
|
|
|
15 '$status $body_bytes_sent "$http_referer" '
|
|
|
16 '"$http_user_agent" "$http_x_forwarded_for" '
|
|
|
17 '$request_time $upstream_response_time $pipe $upstream_cache_status';
|
|
|
18
|
|
|
19 access_log /dev/stdout main_timed;
|
|
|
20 error_log /dev/stderr notice;
|
|
|
21
|
|
|
22 keepalive_timeout 65;
|
|
|
23
|
|
|
24 # Write temporary files to /tmp so they can be created as a non-privileged user
|
|
|
25 client_body_temp_path /tmp/client_temp;
|
|
|
26 proxy_temp_path /tmp/proxy_temp_path;
|
|
|
27 fastcgi_temp_path /tmp/fastcgi_temp;
|
|
|
28 uwsgi_temp_path /tmp/uwsgi_temp;
|
|
|
29 scgi_temp_path /tmp/scgi_temp;
|
|
|
30
|
|
|
31 # Hardening
|
|
|
32 proxy_hide_header X-Powered-By;
|
|
|
33 fastcgi_hide_header X-Powered-By;
|
|
|
34 server_tokens off;
|
|
|
35
|
|
|
36 gzip on;
|
|
|
37 gzip_proxied any;
|
|
|
38 gzip_types text/plain application/xml text/css text/js text/xml application/x-javascript text/javascript application/json application/xml+rss;
|
|
|
39 gzip_vary on;
|
|
|
40 gzip_disable "msie6";
|
|
|
41
|
|
|
42 # Include other server configs
|
|
|
43 include /etc/nginx/conf.d/*.conf;
|
|
|
44 }
|
