fic/server
Archived
1
0
Fork 0
Code Issues Pull requests 10 Releases Wiki Activity

Stronger nginx configuration

Browse source
This commit is contained in:
nemunaire 2014-01-20 09:58:15 +01:00
parent 5e8781baf7
commit bc997708f4
1 changed files with 26 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

27
nginx.conf
View file

@ -1,9 +1,15 @@
server_tokens off;
client_header_buffer_size 512;
client_max_body_size 512;
server { server {
listen 443 ssl; listen 443 ssl;
listen [::]:443 ipv6only=on ssl; listen [::]:443 ipv6only=on ssl;
root /var/www/fic2014-server/htdocs/; root /var/www/fic2014-server/htdocs/;
server_tokens off;
access_log /var/log/nginx/fic.access_log; access_log /var/log/nginx/fic.access_log;
error_log /var/log/nginx/fic.error_log; error_log /var/log/nginx/fic.error_log;
@ -17,7 +23,14 @@ server {
ssl_crl /var/www/fic2014-server/misc/pki/crl.pem; ssl_crl /var/www/fic2014-server/misc/pki/crl.pem;
add_header Strict-Transport-Security "max-age=2592000; includeSubdomains"; add_header Strict-Transport-Security "max-age=2592000; includeSubdomains";
error_page 400 /errors/400/index.html;
error_page 403 /errors/403/index.html;
error_page 404 /errors/404/index.html;
error_page 413 414 /errors/413/index.html;
error_page 500 503 /errors/500/index.html;
error_page 502 504 /errors/502/index.html;
location / location /
{ {
default_type text/html; default_type text/html;
@ -44,6 +57,11 @@ server {
} }
} }
location /errors
{
root /var/www/fic2014-server/;
}
location /connected location /connected
{ {
return 403; return 403;
@ -52,6 +70,10 @@ server {
location /files location /files
{ {
root /var/www/fic2014-server/; root /var/www/fic2014-server/;
aio on;
directio 512;
output_buffers 1 128k;
} }
location ~* \favicon.ico$ { location ~* \favicon.ico$ {
@ -75,6 +97,9 @@ server {
location /submission.php location /submission.php
{ {
root /var/www/fic2014-server/; root /var/www/fic2014-server/;
limit_rate 1k;
include /etc/nginx/fastcgi.conf; include /etc/nginx/fastcgi.conf;
fastcgi_pass unix:/var/run/php-fpm.sock; fastcgi_pass unix:/var/run/php-fpm.sock;
break; break;