jsproxy/nginx.conf
2019-04-26 14:48:49 +08:00

60 lines
1.7 KiB
Nginx Configuration File

http {
server {
server_name *.etherdream.com;
ssl_certificate cert/etherdream.com/ecc.cer;
ssl_certificate_key cert/etherdream.com/ecc.key;
listen 8443 ssl http2;
listen 8080;
include api.conf;
}
resolver 1.1.1.1 ipv6=off;
resolver_timeout 10s;
keepalive_timeout 60;
keepalive_requests 2048;
server_tokens off;
underscores_in_headers on;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE+AES128:ECDHE+AES256:ECDHE+3DES;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;
ssl_prefer_server_ciphers on;
limit_req_log_level warn;
limit_req_zone $binary_remote_addr zone=reqip:16m rate=100r/s;
limit_req zone=reqip burst=200 nodelay;
# separated by tab (\t)
log_format log_proxy escape=none
'$time_iso8601 $_origin_id $_ver $remote_addr '
'$upstream_cache_status $request_time '
'$request_length $bytes_sent '
'$request_method $_url $status $upstream_http_access_control_allow_origin '
'$http_user_agent'
;
access_log logs/proxy.log log_proxy buffer=64k flush=1s;
proxy_cache_path cache
levels=1:2
keys_zone=my_cache:8m
max_size=10g
inactive=6h
use_temp_path=off
;
proxy_http_version 1.1;
proxy_ssl_server_name on;
proxy_buffer_size 16k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_send_timeout 10s;
map $http_origin $_origin_id {
include allowed-sites.conf;
}
}
events {
worker_connections 4096;
}