this repo has no description
1worker_processes auto;
2error_log /var/log/nginx/error.log warn;
3
4events {
5 worker_connections 4096;
6}
7
8http {
9 include /etc/nginx/mime.types;
10 default_type application/octet-stream;
11 access_log /var/log/nginx/access.log;
12 sendfile on;
13 keepalive_timeout 65;
14
15 gzip on;
16 gzip_types text/plain text/css application/json application/javascript text/xml application/xml;
17
18 ssl_protocols TLSv1.2 TLSv1.3;
19 ssl_prefer_server_ciphers off;
20 ssl_session_cache shared:SSL:10m;
21 ssl_stapling on;
22 ssl_stapling_verify on;
23
24 server {
25 listen 80;
26 listen [::]:80;
27 server_name _;
28
29 location /.well-known/acme-challenge/ {
30 root /var/www/acme;
31 }
32
33 location / {
34 return 301 https://$host$request_uri;
35 }
36 }
37
38 server {
39 listen 443 ssl http2;
40 listen [::]:443 ssl http2;
41 server_name _;
42
43 ssl_certificate /etc/nginx/certs/fullchain.pem;
44 ssl_certificate_key /etc/nginx/certs/privkey.pem;
45 client_max_body_size 100M;
46
47 location / {
48 proxy_pass http://127.0.0.1:3000;
49 proxy_http_version 1.1;
50 proxy_set_header Upgrade $http_upgrade;
51 proxy_set_header Connection "upgrade";
52 proxy_set_header Host $host;
53 proxy_set_header X-Real-IP $remote_addr;
54 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
55 proxy_set_header X-Forwarded-Proto $scheme;
56 proxy_read_timeout 86400;
57 proxy_send_timeout 86400;
58 proxy_buffering off;
59 }
60 }
61}