76 lines
2.3 KiB
Plaintext
Executable File
76 lines
2.3 KiB
Plaintext
Executable File
load_module /usr/lib/angie/modules/ngx_http_headers_more_filter_module.so;
|
|
load_module /usr/lib/angie/modules/ngx_http_brotli_filter_module.so;
|
|
load_module /usr/lib/angie/modules/ngx_http_brotli_static_module.so;
|
|
load_module /usr/lib/angie/modules/ngx_http_zstd_filter_module.so;
|
|
load_module /usr/lib/angie/modules/ngx_http_zstd_static_module.so;
|
|
|
|
user www-data;
|
|
pid /run/angie.pid;
|
|
worker_processes auto;
|
|
worker_rlimit_nofile 65535;
|
|
|
|
events {
|
|
multi_accept on;
|
|
worker_connections 65535;
|
|
}
|
|
|
|
http {
|
|
|
|
log_format main '$remote_addr $remote_port - $remote_user [$time_local] "$request" '
|
|
'$status $body_bytes_sent "$http_referer" '
|
|
'"$http_user_agent" "$http_x_forwarded_for" "$http_cookie" "$sent_http_set_cookie" "$http_host" "$http3"';
|
|
|
|
|
|
#charset utf-8;
|
|
sendfile on;
|
|
tcp_nopush on;
|
|
tcp_nodelay on;
|
|
server_tokens off;
|
|
log_not_found off;
|
|
types_hash_max_size 2048;
|
|
client_max_body_size 512M;
|
|
client_body_buffer_size 512M;
|
|
etag off;
|
|
|
|
# MIME
|
|
include mime.types;
|
|
default_type application/octet-stream;
|
|
|
|
# Logging
|
|
access_log /var/log/angie/access.log;
|
|
error_log /var/log/angie/error.log warn;
|
|
|
|
# SSL
|
|
ssl_session_timeout 1d;
|
|
ssl_session_cache shared:SSL:10m;
|
|
ssl_session_tickets off;
|
|
|
|
# Mozilla Modern configuration
|
|
ssl_protocols TLSv1.3 TLSv1.2;
|
|
|
|
# OCSP Stapling
|
|
ssl_stapling on;
|
|
ssl_stapling_verify on;
|
|
resolver 1.1.1.1 1.0.0.1 8.8.8.8 8.8.4.4 valid=60s;
|
|
resolver_timeout 2s;
|
|
|
|
brotli off;
|
|
brotli_comp_level 6;
|
|
brotli_static on;
|
|
brotli_types *;
|
|
|
|
zstd on;
|
|
zstd_min_length 256; # no less than 256 bytes
|
|
zstd_comp_level 3; # set the level to 3
|
|
|
|
# Load configs
|
|
include /etc/angie/conf.d/*.conf;
|
|
include /etc/angie/sites-enabled/*;
|
|
more_clear_headers "Server";
|
|
|
|
set_real_ip_from 127.0.0.1; # Zaufane IP (np. Varnish lub inny proxy)
|
|
real_ip_header X-Forwarded-For; # Użyj nagłówka X-Forwarded-For do określenia prawdziwego IP
|
|
real_ip_recursive on; # Uwzględnij wszystkie adresy IP w X-Forwarded-For
|
|
|
|
}
|