some nginx changes

This commit is contained in:
creme 2020-02-04 11:22:56 +01:00
parent fecab48caf
commit 0fbef90be2
Signed by: creme
GPG Key ID: C147C3B7FBDF08D0
7 changed files with 168 additions and 35 deletions

View File

@ -52,6 +52,14 @@ http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
# if the request body size is more than the buffer size, then the entire (or partial)
# request body is written into a temporary file
client_body_buffer_size 128k;
# maximum number and size of buffers for large headers to read from client request
large_client_header_buffers 4 256k;
##
# SSL Settings
##
@ -85,34 +93,15 @@ http {
##
gzip on;
gzip_min_length 10240;
gzip_comp_level 1;
gzip_vary on;
gzip_disable "msie6";
gzip_proxied expired no-cache no-store private auth;
gzip_types
# text/html is always compressed by HttpGzipModule
text/css
text/javascript
text/xml
text/plain
text/x-component
application/javascript
application/x-javascript
application/json
application/xml
application/rss+xml
application/atom+xml
font/truetype
font/opentype
application/vnd.ms-fontobject
image/svg+xml;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
gzip_http_version 1.1;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
# gzip_proxied any;
# gzip_comp_level 6;
# gzip_buffers 16 8k;
# gzip_http_version 1.1;
# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
##
# DDOS Defense
@ -127,12 +116,6 @@ http {
# limit_req_zone $binary_remote_addr zone=req_limit_mid:128m rate=20r/s;
# limit_req_zone $binary_remote_addr zone=req_limit_high:512m rate=30r/s;
# if the request body size is more than the buffer size, then the entire (or partial)
# request body is written into a temporary file
client_body_buffer_size 128k;
# maximum number and size of buffers for large headers to read from client request
large_client_header_buffers 4 256k;
##
# Virtual Host Configs

View File

@ -3,7 +3,7 @@ server {
include snippets/listen_local.conf;
include snippets/listen.conf;
# include snippets/ddos_def.conf;
server_name bbj.envs.net forum.envs.net;
server_name bbj.envs.net;
return 307 https://$host$request_uri;
}
@ -12,7 +12,7 @@ server {
include snippets/listen_local_ssl.conf;
include snippets/listen_ssl.conf;
# include snippets/ddos_def.conf;
server_name bbj.envs.net forum.envs.net;
server_name bbj.envs.net;
include snippets/ssl.conf;
include ssl/envs_net_wild.conf;
@ -32,3 +32,28 @@ server {
include snippets/favicon;
}
#ALIAS
server {
include snippets/listen.conf;
# include snippets/ddos_def.conf;
server_name forum.envs.net;
location / {
return 301 https://bj.envs.net/;
}
}
server {
include snippets/listen_ssl.conf;
# include snippets/ddos_def.conf;
server_name forum.envs.net;
include snippets/ssl.conf;
include ssl/envs_net_wild.conf;
include snippets/local_ssl_header.conf;
location / {
return 301 https://bbj.envs.net/;
}
}

View File

@ -28,3 +28,28 @@ server {
proxy_set_header Connection "Upgrade";
}
}
#ALIAS
server {
include snippets/listen.conf;
# include snippets/ddos_def.conf;
server_name cryptpad.envs.net;
location / {
return 301 https://pad.envs.net/;
}
}
server {
include snippets/listen_ssl.conf;
# include snippets/ddos_def.conf;
server_name cryptpad.envs.net;
include snippets/ssl.conf;
include ssl/envs_net_wild.conf;
include snippets/local_ssl_header.conf;
location / {
return 301 https://pad.envs.net/;
}
}

View File

@ -2,7 +2,7 @@
server {
include snippets/listen.conf;
# include snippets/ddos_mid.conf;
server_name pb.envs.net paste.envs.net pastebin.envs.net;
server_name pb.envs.net;
return 307 https://$host$request_uri;
}
@ -11,7 +11,7 @@ server {
server {
include snippets/listen_ssl.conf;
# include snippets/ddos_mid.conf;
server_name pb.envs.net paste.envs.net pastebin.envs.net;
server_name pb.envs.net;
include snippets/ssl.conf;
include ssl/envs_net_wild.conf;
@ -25,3 +25,28 @@ server {
proxy_pass https://pb.envs.net;
}
}
#ALIAS
server {
include snippets/listen.conf;
# include snippets/ddos_def.conf;
server_name paste.envs.net pastebin.envs.net;
location / {
return 301 https://pb.envs.net/;
}
}
server {
include snippets/listen_ssl.conf;
# include snippets/ddos_def.conf;
server_name paste.envs.net pastebin.envs.net;
include snippets/ssl.conf;
include ssl/envs_net_wild.conf;
include snippets/local_ssl_header.conf;
location / {
return 301 https://pb.envs.net/;
}
}

View File

@ -25,3 +25,28 @@ server {
proxy_pass https://rss.envs.net;
}
}
#ALIAS
server {
include snippets/listen.conf;
# include snippets/ddos_def.conf;
server_name atom.envs.net;
location / {
return 301 https://rss.envs.net/;
}
}
server {
include snippets/listen_ssl.conf;
# include snippets/ddos_def.conf;
server_name atom.envs.net;
include snippets/ssl.conf;
include ssl/envs_net_wild.conf;
include snippets/local_ssl_header.conf;
location / {
return 301 https://rss.envs.net/;
}
}

View File

@ -25,3 +25,28 @@ server {
proxy_pass https://searx.envs.net;
}
}
#ALIAS
server {
include snippets/listen.conf;
# include snippets/ddos_def.conf;
server_name search.envs.net;
location / {
return 301 https://searx.envs.net/;
}
}
server {
include snippets/listen_ssl.conf;
# include snippets/ddos_def.conf;
server_name search.envs.net;
include snippets/ssl.conf;
include ssl/envs_net_wild.conf;
include snippets/local_ssl_header.conf;
location / {
return 301 https://searx.envs.net/;
}
}

View File

@ -29,3 +29,28 @@ server {
include snippets/favicon;
}
#ALIAS
server {
include snippets/listen.conf;
# include snippets/ddos_def.conf;
server_name termbin.envs.net;
location / {
return 301 https://tb.envs.net/;
}
}
server {
include snippets/listen_ssl.conf;
# include snippets/ddos_def.conf;
server_name termbin.envs.net;
include snippets/ssl.conf;
include ssl/envs_net_wild.conf;
include snippets/local_ssl_header.conf;
location / {
return 301 https://tb.envs.net/;
}
}