53 lines
1.5 KiB
Nginx Configuration File
53 lines
1.5 KiB
Nginx Configuration File
|
|
||
|
|
user www-data;
|
||
|
|
worker_processes 2;
|
||
|
|
|
||
|
|
error_log /var/log/nginx/error.log warn;
|
||
|
|
pid /var/run/nginx.pid;
|
||
|
|
|
||
|
|
|
||
|
|
events {
|
||
|
|
worker_connections 1024;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
http {
|
||
|
|
include /etc/nginx/mime.types;
|
||
|
|
default_type application/octet-stream;
|
||
|
|
|
||
|
|
upstream ro01 {
|
||
|
|
server [2001:470:6c:655::2] weight=10;
|
||
|
|
server local.krautspace.de weight=1;
|
||
|
|
}
|
||
|
|
proxy_cache_path /var/lib/nginx/cache keys_zone=statusATro01:10m;
|
||
|
|
|
||
|
|
|
||
|
|
ssl_prefer_server_ciphers on;
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # not possible to do exclusive
|
||
|
|
ssl_ciphers 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES2\
|
||
|
|
56:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-\
|
||
|
|
SHA:CAMELLIA128-SHA:AES128-SHA';
|
||
|
|
ssl_dhparam /etc/ssl/private/dhparams.pem;
|
||
|
|
|
||
|
|
add_header Strict-Transport-Security max-age=15768000; # six months
|
||
|
|
## Use a SSL/TLS cache for SSL session resume.
|
||
|
|
ssl_session_cache shared:SSL:10m;
|
||
|
|
ssl_session_timeout 10m;
|
||
|
|
|
||
|
|
# setzt die Variable php_https abhängig davon ob es sich um eine https Verbindung handelt, ist für die Weitergabe an php
|
||
|
|
map $scheme $php_https { default off; https on; }
|
||
|
|
|
||
|
|
sendfile on;
|
||
|
|
#tcp_nopush on;
|
||
|
|
|
||
|
|
keepalive_timeout 65;
|
||
|
|
server_tokens off;
|
||
|
|
|
||
|
|
# etag ist Ausgeschalten wegen erweiterter möglicher Tracking von Usern
|
||
|
|
etag off;
|
||
|
|
|
||
|
|
# Hier lohnt sich auch ein Blick hinnein
|
||
|
|
include /etc/nginx/conf.d/*.conf;
|
||
|
|
include /etc/nginx/sites-enabled/*;
|
||
|
|
}
|