Skip to content

Instantly share code, notes, and snippets.

@MikeLarned
Last active May 26, 2017 14:52
Show Gist options
  • Save MikeLarned/4ab209ed468dcaca6484e877dc43e365 to your computer and use it in GitHub Desktop.
Save MikeLarned/4ab209ed468dcaca6484e877dc43e365 to your computer and use it in GitHub Desktop.
Nginx Test Config
user www-data;
worker_processes 4;
pid /run/nginx.pid;
events {
worker_connections 768;
}
http {
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
include /etc/nginx/mime.types;
default_type application/octet-stream;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
gzip on;
gzip_disable "msie6";
server {
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;
server_name certs.ria.ms;
return 301 https://$server_name$request_uri;
root /usr/share/nginx/html;
index index.html index.htm;
location / {
try_files $uri $uri/ /index.html;
}
}
server {
listen 443 ssl default_server;
include snippets/ssl-certs.ria.ms.conf;
ssl_protocols TLSv1.1 TLSv1.2;
#ssl_protocols [SSLv2] [SSLv3] [TLSv1] [TLSv1.1] [TLSv1.2] [TLSv1.3]
location / {
add_header Content-Type text/plain;
return 200 $ssl_protocol;
}
}
}
user www-data;
worker_processes 4;
pid /run/nginx.pid;
events {
worker_connections 768;
}
http {
##
# Basic Settings
##
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
# server_tokens off;
# server_names_hash_bucket_size 64;
# server_name_in_redirect off;
include /etc/nginx/mime.types;
default_type application/octet-stream;
##
# Logging Settings
##
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
##
# Gzip Settings
##
gzip on;
gzip_disable "msie6";
server {
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;
server_name certs.ria.ms;
return 301 https://$server_name$request_uri;
}
root /usr/share/nginx/html;
index index.html index.htm;
# Make site accessible from http://localhost/
server_name localhost;
location / {
# First attempt to serve request as file, then
# as directory, then fall back to displaying a 404.
try_files $uri $uri/ /index.html;
# Uncomment to enable naxsi on this location
# include /etc/nginx/naxsi.rules
}
# Location - LetsEncrypt Validation
location ~ /.well-known {
allow all;
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment