Nginx configuration

nginx.conf

worker_processes auto;

events {
	use epoll;
	worker_connections 1024;
	multi_accept on;
}

http {
	limit_req_zone $binary_remote_addr zone=ddos:10m rate=50r/s;

	server {
		location / {
			limit_req zone=ddos burst=20 nodelay;
		}
	}

	client_body_buffer_size 10K;
	client_header_buffer_size 1k;
	client_max_body_size 8m;
	large_client_header_buffers 2 1k;
	server_names_hash_bucket_size 64;
	sendfile on;
	# tcp_nopush on;
	tcp_nodelay on;
	proxy_buffering off;
	keepalive_timeout 15;
	keepalive_requests 200;
	reset_timedout_connection on;
	client_body_timeout 10;
	send_timeout 5;
	server_tokens off;
	types_hash_max_size 2048;
	include /etc/nginx/mime.types;
	default_type application/octet-stream;
	access_log off;
	# access_log /www/logs/nginx.log;
	error_log /var/log/nginx/error.log;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM;
	ssl_prefer_server_ciphers on;
	ssl_session_cache shared:SSL:10m;
	ssl_session_timeout 10m;
	proxy_http_version 1.1;
	include /www/nginx/*.conf;
}