nginx.conf

user              nginx;                                                           
worker_processes  auto;                                                            
                                                                                   
error_log  /var/log/nginx/error.log;                                               
pid        /var/run/nginx.pid;                                                     
                                                                                   
events {                                                                           
        worker_connections  1024;                                                  
}                                                                                  
                                                                                   
http {                                                                             
        include         /etc/nginx/mime.types;                                     
        default_type    application/octet-stream;                                  
                                                                                   
        log_format main                                                            
                ' -  [] '                                                          
                '""   '                                                            
                '"" "" '                                                           
                '""';                                                              
                                                                                   
        client_header_timeout   10m;                                               
        client_body_timeout     10m;                                               
        send_timeout            10m;                                               
                                                                                   
        connection_pool_size            256;                                       
        client_header_buffer_size       4k;                                        
        large_client_header_buffers     8 8k;                                      
        request_pool_size               4k;                                        
                                                                                   
        gzip on;                                                                   
        gzip_min_length 1100;                                                      
        gzip_buffers    4 8k;                                                      
        gzip_types      text/plain;                                                
                                                                                   
        output_buffers  1 32k;                                                     
        postpone_output 1460;                                                      
                                                                                   
        sendfile        on;                                                        
        tcp_nopush      on;                                                        
        tcp_nodelay     on;                                                        
                                                                                   
        keepalive_timeout       75 20;                                             
                                                                                   
        ignore_invalid_headers  on;                                                
                                                                                   
        index index.html; 
        ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;                                     
        ssl_session_cache off;                                                     
        ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
                                                                                   
        ssl_prefer_server_ciphers on;                                                  
        ssl_dhparam /etc/ssl/dhparam.pem;                                          
                                                                                
        server {                                                                
               listen 80;                                                       
               listen 8080;                                                     
               return 301 https://$host$request_uri;                            
        }                                                                       
                                                                                
        include /etc/nginx/site-enabled/*;                                      
                                                                                
}                                                                               
# vi: ft=nginx