add the bakcup nginx config file

2024-07-22 10:06:47 +01:00
parent 49387e280b
commit afd8a07317
1 changed files with 63 additions and 0 deletions
@@ -0,0 +1,63 @@
+worker_processes 1;
+events { worker_connections 1024; }
+
+http {
+ 
+    #include /etc/nginx/conf.d/*.conf;
+    #resolver 127.0.0.1 ipv6=off valid=40s;  # The DNS IP server
+
+	set_real_ip_from 10.0.0.0/8;
+	set_real_ip_from 172.16.0.0/12; # Includes Docker subnet
+	set_real_ip_from 192.168.88.0/24;
+	# NPM generated CDN ip ranges:
+#	include conf.d/include/ip_ranges.conf;
+	# always put the following 2 lines after ip subnets:
+	real_ip_header X-Real-IP;
+	real_ip_recursive on;
+
+	proxy_http_version            1.1;
+	proxy_set_header              X-Forwarded-Scheme $scheme;
+	proxy_set_header              X-Forwarded-For $proxy_add_x_forwarded_for;
+	proxy_set_header              Accept-Encoding "";
+
+ proxy_headers_hash_max_size 2512
+
+    sendfile on;
+    client_max_body_size 500M; 
+    proxy_set_header   Host $host;
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header   X-Forwarded-Host $server_name;
+    #proxy_set_header Upgrade $http_upgrade;
+    #proxy_set_header Connection 'upgrade';
+    #proxy_cache_bypass $http_upgrade; 
+
+
+     server {
+        listen 80;
+        listen 443 default ssl;
+	ssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; # managed by$
+        ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed $
+        location / {
+            proxy_pass         http://1.1.1.1;
+            proxy_redirect     off;
+            proxy_set_header   Host $host;
+            proxy_set_header   X-Real-IP $remote_addr;
+            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header   X-Forwarded-Host $server_name;
+        }
+}
+	##
+    # Connection header for WebSocket reverse proxy
+    ##
+    map $http_upgrade $connection_upgrade {
+        default upgrade;
+        ''      close;
+    }
+
+    include /etc/nginx/conf.d/*.conf;
+    resolver 127.0.0.1 ipv6=off valid=40s;  # The DNS IP server
+
+}
+
+