| # compress responses whenever possible | |
| gzip_http_version 1.1; | |
| gzip_vary on; | |
| gzip_proxied any; | |
| gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript; | |
| gzip_comp_level 6; | |
| gzip_buffers 16 8k; | |
| # allow up to 3 minutes for Galaxy to respond to slow requests before timing out | |
| uwsgi_read_timeout 180; | |
| # maximum file upload size | |
| client_max_body_size 10g; | |
| ssl_dhparam /etc/nginx/ssl/dhparams.pem; | |
| # cert/key | |
| ssl_certificate /etc/letsencrypt/live/galaxy.sanbi.ac.za/fullchain.pem; | |
| ssl_certificate_key /etc/letsencrypt/live/galaxy.sanbi.ac.za/privkey.pem; | |
| # OCSP stapling | |
| ssl_stapling on; | |
| ssl_stapling_verify on; | |
| ssl_trusted_certificate /etc/letsencrypt/live/galaxy.sanbi.ac.za/chain.pem; | |
| ssl_session_cache shared:le_nginx_SSL:1m; | |
| ssl_session_timeout 1440m; | |
| ssl_ciphers "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS"; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment