docker-nginx/nginx.conf at master · AbramLtd/docker-nginx · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
user nginx;
worker_processes auto;
worker_rlimit_nofile 8192;
daemon off;

events {
  worker_connections 8000;

  multi_accept on;
  use epoll;
}

error_log  /var/log/nginx/error.log warn;

pid        /var/run/nginx.pid;

http {

  server_tokens off;

  include       /etc/nginx/mime.types;
  default_type  application/octet-stream;

  charset_types text/xml text/plain text/vnd.wap.wml application/x-javascript application/rss+xml text/css application/javascript application/json;

  log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for"';

  keepalive_timeout 20;

  sendfile        on;

  tcp_nopush      on;

  tcp_nodelay     off;

  gzip on;

  gzip_http_version  1.0;

  gzip_comp_level    5;

  gzip_min_length    256;

  gzip_proxied       any;

  gzip_vary          on;

  gzip_types
    application/atom+xml
    application/javascript
    application/json
    application/rss+xml
    application/vnd.ms-fontobject
    application/x-font-ttf
    application/x-web-app-manifest+json
    application/xhtml+xml
    application/xml
    font/opentype
    image/svg+xml
    image/x-icon
    text/css
    text/plain
    text/x-component;

  ssl_protocols              TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers                "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
  ssl_prefer_server_ciphers  on;

  ssl_session_cache    shared:SSL:10m;
  ssl_session_timeout  10m;

  include sites-enabled/*;
}