roles/server/nginx/server/files/default/nginx.conf

   1 #
   2 ################################################
   3 ### Managed by someone's ansible provisioner ###
   4 ################################################
   5 # Part of: https://git.somenet.org/root/pub/somesible.git
   6 # 2017-2024 by someone <someone@somenet.org>
   7 #
   8 user www-data;
   9 worker_processes auto;
  10 pid /run/nginx.pid;
  11 include /etc/nginx/modules-enabled/*.conf;
  12
  13 events {
  14         worker_connections 768;
  15         # multi_accept on;
  16 }
  17
  18 http {
  19         sendfile on;
  20         tcp_nopush on;
  21         tcp_nodelay on;
  22         keepalive_timeout 65;
  23         types_hash_max_size 2048;
  24
  25         include /etc/nginx/mime.types;
  26         default_type application/octet-stream;
  27         charset utf-8;
  28
  29         ##
  30         # Logging Settings
  31         ##
  32
  33         access_log /var/log/nginx/access.log;
  34         error_log /var/log/nginx/error.log;
  35
  36         # get rid of php timeouts.
  37         fastcgi_read_timeout 900;
  38
  39         # use http 429 to indicate rate limiting.
  40         limit_req_status 429;
  41
  42         # disable any default-webroot.
  43         root /dev/null;
  44
  45         # $connection_upgrade map
  46         map $http_upgrade $connection_upgrade {
  47                 default upgrade;
  48                 ''      close;
  49         }
  50
  51         include /etc/nginx/conf.d/*.conf;
  52         include /etc/nginx/sites-enabled/*.vhost;
  53 }