diff --git a/nginx.conf.save b/nginx.conf.save new file mode 100755 index 0000000..0518696 --- /dev/null +++ b/nginx.conf.save @@ -0,0 +1,63 @@ +worker_processes 1; +events { worker_connections 1024; } + +http { + + #include /etc/nginx/conf.d/*.conf; + #resolver 127.0.0.1 ipv6=off valid=40s; # The DNS IP server + + set_real_ip_from 10.0.0.0/8; + set_real_ip_from 172.16.0.0/12; # Includes Docker subnet + set_real_ip_from 192.168.88.0/24; + # NPM generated CDN ip ranges: +# include conf.d/include/ip_ranges.conf; + # always put the following 2 lines after ip subnets: + real_ip_header X-Real-IP; + real_ip_recursive on; + + proxy_http_version 1.1; + proxy_set_header X-Forwarded-Scheme $scheme; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Accept-Encoding ""; + + proxy_headers_hash_max_size 2512 + + sendfile on; + client_max_body_size 500M; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $server_name; + #proxy_set_header Upgrade $http_upgrade; + #proxy_set_header Connection 'upgrade'; + #proxy_cache_bypass $http_upgrade; + + + server { + listen 80; + listen 443 default ssl; + ssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; # managed by$ + ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed $ + location / { + proxy_pass http://1.1.1.1; + proxy_redirect off; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $server_name; + } +} + ## + # Connection header for WebSocket reverse proxy + ## + map $http_upgrade $connection_upgrade { + default upgrade; + '' close; + } + + include /etc/nginx/conf.d/*.conf; + resolver 127.0.0.1 ipv6=off valid=40s; # The DNS IP server + +} + +