danielpotthast

vcl 4.0;

# Default backend definition. Set this to point to your content server.
backend default {
    .host = "127.0.0.1";
    .port = "8080";
    .connect_timeout = 600s;
    .first_byte_timeout = 600s;
    .between_bytes_timeout = 600s;
}

danielpotthast

server {
    listen 80;
    listen [::]:80;
    server_name sitename.tld;

    location ^~ /.well-known/acme-challenge/ {
        alias /var/www/letsencrypt/.well-known/acme-challenge/;
    }

    location / {

danielpotthast

proxy_redirect off;
client_max_body_size 64M;
client_body_buffer_size 128k;
proxy_read_timeout 10s;
proxy_connect_timeout 10s;
proxy_send_timeout 10s;
proxy_headers_hash_bucket_size 256;
proxy_headers_hash_max_size 2048;
proxy_buffering off;
proxy_buffer_size 128k;

danielpotthast

fastcgi_pass unix:/var/run/php/php8.1-fpm.sock;

# regex to split $uri to $fastcgi_script_name and $fastcgi_path
fastcgi_split_path_info ^(.+\.php)(/.+)$;

# Bypass the fact that try_files resets $fastcgi_path_info
# see: http://trac.nginx.org/nginx/ticket/321
set $path_info $fastcgi_path_info;
fastcgi_param PATH_INFO $path_info;

danielpotthast

# Fonts
if ( $uri ~* ^.+?\.(?:eot|svg|svgz|ttf|woff|woff2)$ ) {
  expires 30d;
  access_log off;
  add_header Cache-Control "public";
  add_header Access-Control-Allow-Origin *;
}

# Feed
if ( $uri ~* ^.+?\.(?:rss|atom)$ ) {