nginx-web.conf.erb 2.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990
  1. worker_processes 1;
  2. daemon off;
  3. events {
  4. worker_connections 1024;
  5. }
  6. http {
  7. include /data/etc/nginx/mime.types;
  8. sendfile on;
  9. gzip on;
  10. gzip_disable "MSIE [1-6]\.";
  11. gzip_vary on;
  12. gzip_proxied any;
  13. gzip_comp_level 6;
  14. gzip_buffers 16 8k;
  15. gzip_min_length 500;
  16. gzip_http_version 1.1;
  17. gzip_types text/plain text/xml text/javascript text/css text/comma-separated-values application/xml+rss application/xml application/x-javascript application/json application/javascript application/atom+xml;
  18. # Proxy upstream to the puma process
  19. upstream rails {
  20. server 127.0.0.1:3000;
  21. }
  22. map $http_upgrade $connection_upgrade {
  23. default upgrade;
  24. '' close;
  25. }
  26. # Configuration for Nginx
  27. server {
  28. # Listen on port 8080
  29. listen 8080;
  30. keepalive_timeout 70;
  31. client_max_body_size 80M;
  32. root /app/public;
  33. add_header Strict-Transport-Security "max-age=31536000";
  34. location / {
  35. try_files $uri @rails;
  36. }
  37. location /sw.js {
  38. add_header Cache-Control "public, max-age=0";
  39. add_header Strict-Transport-Security "max-age=31536000";
  40. try_files $uri @rails;
  41. }
  42. location ~ ^/(emoji|packs|system/media_attachments/files|system/accounts/avatars) {
  43. add_header Cache-Control "public, max-age=31536000, immutable";
  44. add_header Strict-Transport-Security "max-age=31536000";
  45. try_files $uri @rails;
  46. }
  47. # Proxy connections to rails
  48. location @rails {
  49. proxy_set_header Host $host;
  50. proxy_set_header X-Real-IP $remote_addr;
  51. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  52. proxy_set_header X-Forwarded-Proto https;
  53. proxy_set_header Proxy "";
  54. proxy_pass_header Server;
  55. proxy_pass http://rails;
  56. proxy_buffering on;
  57. proxy_redirect off;
  58. proxy_http_version 1.1;
  59. proxy_set_header Upgrade $http_upgrade;
  60. proxy_set_header Connection $connection_upgrade;
  61. proxy_cache CACHE;
  62. proxy_cache_valid 200 7d;
  63. proxy_cache_valid 410 24h;
  64. proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
  65. add_header Strict-Transport-Security "max-age=31536000";
  66. add_header X-Cached $upstream_cache_status;
  67. tcp_nodelay on;
  68. }
  69. }
  70. proxy_cache_path /data/var/cache/nginx levels=1:2 keys_zone=CACHE:10m inactive=7d max_size=1g;
  71. error_page 500 501 502 503 504 /500.html;
  72. }