aboutsummaryrefslogtreecommitdiff
path: root/deploy/nginx.conf
blob: d4fe348b475d3ffc0a72029c66a223a7ce1f8e29 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
user	nginx;
worker_processes	1;
daemon	off;

events {
	# The maximum number of simultaneous connections that can be opened by
	# a worker process
	worker_connections  1024;
}

http {
	# Includes mapping of file name extensions to MIME types of responses
	# and defines the default type.
	include /etc/nginx/mime.types;
	default_type application/octet-stream;

	# Don't tell nginx version to the clients. Default is 'on'.
	server_tokens off;

	# Specifies the maximum accepted body size of a client request, as
	# indicated by the request header Content-Length. If the stated content
	# length is greater than this size, then the client receives the HTTP
	# error code 413. Set to 0 to disable. Default is '1m'.
	client_max_body_size 1m;

	# Sendfile copies data between one FD and other from within the kernel,
	# which is more efficient than read() + write(). Default is off.
	sendfile on;

	# Causes nginx to attempt to send its HTTP response head in one packet,
	# instead of using partial frames. Default is 'off'.
	tcp_nopush on;

	# Enables or disables the use of the TCP_NODELAY option. The option is
	# enabled when a connection is transitioned into the keep-alive state.
	# Additionally, it is enabled on SSL connections, for unbuffered
	# proxying, and for WebSocket proxying. 
	tcp_nodelay on;

	# Specifies the main log format.
	log_format main '$remote_addr - $remote_user [$time_local] "$request" '
			'$status $body_bytes_sent "$http_referer" '
			'"$http_user_agent" "$http_x_forwarded_for"';
	server {
		listen	80;
		listen	[::]:80;
		server_name	_;
		root	/var/www/www.adyxax.org/;
		index	index.html;
		error_page	404	/404.html;

		location /static {
			include /etc/nginx/headers_static.conf;
		}
		location / {
			include headers_secure.conf;
			add_header Cache-Control "private, max-age=0, must-revalidate, no-transform";
		}
	}
}