Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
Nginx configuration
worker_processes auto;
events {
use epoll;
worker_connections 1024;
multi_accept on;
}
http {
limit_req_zone $binary_remote_addr zone=ddos:10m rate=50r/s;
server {
location / {
limit_req zone=ddos burst=20 nodelay;
}
}
client_body_buffer_size 10K;
client_header_buffer_size 1k;
client_max_body_size 8m;
large_client_header_buffers 2 1k;
server_names_hash_bucket_size 64;
sendfile on;
# tcp_nopush on;
tcp_nodelay on;
proxy_buffering off;
keepalive_timeout 15;
keepalive_requests 200;
reset_timedout_connection on;
client_body_timeout 10;
send_timeout 5;
server_tokens off;
types_hash_max_size 2048;
include /etc/nginx/mime.types;
default_type application/octet-stream;
access_log off;
# access_log /www/logs/nginx.log;
error_log /var/log/nginx/error.log;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
proxy_http_version 1.1;
include /www/nginx/*.conf;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.