jsproxy/nginx.conf
2019-04-29 17:34:14 +08:00

67 lines
1.9 KiB
Nginx Configuration File

http {
server {
server_name *.etherdream.com;
ssl_certificate cert/etherdream.com/ecc.cer;
ssl_certificate_key cert/etherdream.com/ecc.key;
listen 8443 ssl http2;
include api.conf;
}
resolver 1.1.1.1 ipv6=off;
resolver_timeout 10s;
keepalive_timeout 60;
keepalive_requests 2048;
server_tokens off;
underscores_in_headers on;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256:EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:30m;
ssl_prefer_server_ciphers on;
limit_req_log_level warn;
limit_req_zone $binary_remote_addr zone=reqip:16m rate=100r/s;
limit_req zone=reqip burst=200 nodelay;
# separated by tab (\t)
log_format log_proxy escape=none
'$time_iso8601 $_origin_id $_ver $remote_addr '
'$upstream_cache_status $request_time '
'$request_length $bytes_sent '
'$request_method $_url $status $upstream_http_access_control_allow_origin '
'$http_user_agent'
;
access_log logs/proxy.log log_proxy buffer=64k flush=1s;
proxy_cache_path cache
levels=1:2
keys_zone=my_cache:32m
max_size=20g
inactive=24h
use_temp_path=off
;
proxy_http_version 1.1;
proxy_ssl_server_name on;
proxy_buffer_size 16k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_send_timeout 10s;
# traffic statistics
lua_shared_dict traff 16k;
lua_package_path ./lua/?.lua;
init_by_lua_file ../lua/init.lua;
init_worker_by_lua_file ../lua/worker.lua;
log_by_lua require('g').inc();
map $http_origin $_origin_id {
include allowed-sites.conf;
}
}
events {
worker_connections 4096;
}