From b2ffd0f063fc933864a44c5fc04b0ff0011444c8 Mon Sep 17 00:00:00 2001 From: Christoph Haas Date: Fri, 22 Jul 2016 12:20:12 +0200 Subject: [PATCH] nginx production configuration checked in --- doc/nginx/debshots_params | 5 + doc/nginx/dhparams.pem | 8 + doc/nginx/fastcgi.conf | 26 +++ doc/nginx/fastcgi_params | 25 +++ doc/nginx/koi-utf | 109 +++++++++ doc/nginx/koi-win | 103 +++++++++ doc/nginx/mime.types | 89 ++++++++ doc/nginx/nginx.conf | 101 +++++++++ doc/nginx/nginx.conf.dpkg-dist | 93 ++++++++ doc/nginx/passenger.conf | 2 + doc/nginx/proxy_params | 4 + doc/nginx/scgi_params | 17 ++ doc/nginx/{ => sites-available}/default | 5 + doc/nginx/sites-available/default.dpkg-dist | 87 ++++++++ doc/nginx/sites-available/works | 171 +++++++++++++++ doc/nginx/sites-available/works2 | 207 ++++++++++++++++++ doc/nginx/sites-enabled/default | 1 + doc/nginx/snippets/fastcgi-php.conf | 13 ++ doc/nginx/snippets/snakeoil.conf | 5 + doc/nginx/ssl/2011/screenshots.debian.net.crt | 61 ++++++ doc/nginx/ssl/2011/screenshots.debian.net.key | 52 +++++ doc/nginx/ssl/screenshots.debian.net.crt | 98 +++++++++ doc/nginx/ssl/screenshots.debian.net.key | 28 +++ doc/nginx/uwsgi_params | 17 ++ doc/nginx/win-utf | 125 +++++++++++ 25 files changed, 1452 insertions(+) create mode 100644 doc/nginx/debshots_params create mode 100644 doc/nginx/dhparams.pem create mode 100644 doc/nginx/fastcgi.conf create mode 100644 doc/nginx/fastcgi_params create mode 100644 doc/nginx/koi-utf create mode 100644 doc/nginx/koi-win create mode 100644 doc/nginx/mime.types create mode 100644 doc/nginx/nginx.conf create mode 100644 doc/nginx/nginx.conf.dpkg-dist create mode 100644 doc/nginx/passenger.conf create mode 100644 doc/nginx/proxy_params create mode 100644 doc/nginx/scgi_params rename doc/nginx/{ => sites-available}/default (96%) create mode 100644 doc/nginx/sites-available/default.dpkg-dist create mode 100644 doc/nginx/sites-available/works create mode 100644 doc/nginx/sites-available/works2 create mode 120000 doc/nginx/sites-enabled/default create mode 100644 doc/nginx/snippets/fastcgi-php.conf create mode 100644 doc/nginx/snippets/snakeoil.conf create mode 100644 doc/nginx/ssl/2011/screenshots.debian.net.crt create mode 100644 doc/nginx/ssl/2011/screenshots.debian.net.key create mode 100644 doc/nginx/ssl/screenshots.debian.net.crt create mode 100644 doc/nginx/ssl/screenshots.debian.net.key create mode 100644 doc/nginx/uwsgi_params create mode 100644 doc/nginx/win-utf diff --git a/doc/nginx/debshots_params b/doc/nginx/debshots_params new file mode 100644 index 0000000..1bb3ce2 --- /dev/null +++ b/doc/nginx/debshots_params @@ -0,0 +1,5 @@ +add_header Cache-Control public; +add_header Last-Modified ""; +add_header ETag ""; +proxy_cache assets; + diff --git a/doc/nginx/dhparams.pem b/doc/nginx/dhparams.pem new file mode 100644 index 0000000..d273d31 --- /dev/null +++ b/doc/nginx/dhparams.pem @@ -0,0 +1,8 @@ +-----BEGIN DH PARAMETERS----- +MIIBCAKCAQEA8kUEh2+7OSDG3BQ22cJBlBM0jp+AWW8Wa64J0hE/gQaR8jw9VSQW +a+WBaDQ+FAcxOmAeVvrX4owvBocHBcVPmU4NEnkWe77qsCG56wEJWco+DgN3cq43 +SYbhI3s2HNQwLCzUYLAMZVXcUDH4Nn3cRTTl3ZNpB99XhAio20frNpGQrQeUb0Of +dDj3QpLL1k09b+OVnAh+3KFHawrjzzyFf9pZMsrmK/wZR5SSds1TTisHjVaJe4zN +dcOfvQr5dUHl1mvwxYPnpbXmXdlDmdBU6/HCqkXpUcfl18bhwKG1UT7wmWuInizT +AsNFRK393l5eqlE+AFvWZpacMGGMGJhd+wIBAg== +-----END DH PARAMETERS----- diff --git a/doc/nginx/fastcgi.conf b/doc/nginx/fastcgi.conf new file mode 100644 index 0000000..091738c --- /dev/null +++ b/doc/nginx/fastcgi.conf @@ -0,0 +1,26 @@ + +fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; +fastcgi_param QUERY_STRING $query_string; +fastcgi_param REQUEST_METHOD $request_method; +fastcgi_param CONTENT_TYPE $content_type; +fastcgi_param CONTENT_LENGTH $content_length; + +fastcgi_param SCRIPT_NAME $fastcgi_script_name; +fastcgi_param REQUEST_URI $request_uri; +fastcgi_param DOCUMENT_URI $document_uri; +fastcgi_param DOCUMENT_ROOT $document_root; +fastcgi_param SERVER_PROTOCOL $server_protocol; +fastcgi_param REQUEST_SCHEME $scheme; +fastcgi_param HTTPS $https if_not_empty; + +fastcgi_param GATEWAY_INTERFACE CGI/1.1; +fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; + +fastcgi_param REMOTE_ADDR $remote_addr; +fastcgi_param REMOTE_PORT $remote_port; +fastcgi_param SERVER_ADDR $server_addr; +fastcgi_param SERVER_PORT $server_port; +fastcgi_param SERVER_NAME $server_name; + +# PHP only, required if PHP was built with --enable-force-cgi-redirect +fastcgi_param REDIRECT_STATUS 200; diff --git a/doc/nginx/fastcgi_params b/doc/nginx/fastcgi_params new file mode 100644 index 0000000..28decb9 --- /dev/null +++ b/doc/nginx/fastcgi_params @@ -0,0 +1,25 @@ + +fastcgi_param QUERY_STRING $query_string; +fastcgi_param REQUEST_METHOD $request_method; +fastcgi_param CONTENT_TYPE $content_type; +fastcgi_param CONTENT_LENGTH $content_length; + +fastcgi_param SCRIPT_NAME $fastcgi_script_name; +fastcgi_param REQUEST_URI $request_uri; +fastcgi_param DOCUMENT_URI $document_uri; +fastcgi_param DOCUMENT_ROOT $document_root; +fastcgi_param SERVER_PROTOCOL $server_protocol; +fastcgi_param REQUEST_SCHEME $scheme; +fastcgi_param HTTPS $https if_not_empty; + +fastcgi_param GATEWAY_INTERFACE CGI/1.1; +fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; + +fastcgi_param REMOTE_ADDR $remote_addr; +fastcgi_param REMOTE_PORT $remote_port; +fastcgi_param SERVER_ADDR $server_addr; +fastcgi_param SERVER_PORT $server_port; +fastcgi_param SERVER_NAME $server_name; + +# PHP only, required if PHP was built with --enable-force-cgi-redirect +fastcgi_param REDIRECT_STATUS 200; diff --git a/doc/nginx/koi-utf b/doc/nginx/koi-utf new file mode 100644 index 0000000..e7974ff --- /dev/null +++ b/doc/nginx/koi-utf @@ -0,0 +1,109 @@ + +# This map is not a full koi8-r <> utf8 map: it does not contain +# box-drawing and some other characters. Besides this map contains +# several koi8-u and Byelorussian letters which are not in koi8-r. +# If you need a full and standard map, use contrib/unicode2nginx/koi-utf +# map instead. + +charset_map koi8-r utf-8 { + + 80 E282AC ; # euro + + 95 E280A2 ; # bullet + + 9A C2A0 ; #   + + 9E C2B7 ; # · + + A3 D191 ; # small yo + A4 D194 ; # small Ukrainian ye + + A6 D196 ; # small Ukrainian i + A7 D197 ; # small Ukrainian yi + + AD D291 ; # small Ukrainian soft g + AE D19E ; # small Byelorussian short u + + B0 C2B0 ; # ° + + B3 D081 ; # capital YO + B4 D084 ; # capital Ukrainian YE + + B6 D086 ; # capital Ukrainian I + B7 D087 ; # capital Ukrainian YI + + B9 E28496 ; # numero sign + + BD D290 ; # capital Ukrainian soft G + BE D18E ; # capital Byelorussian short U + + BF C2A9 ; # (C) + + C0 D18E ; # small yu + C1 D0B0 ; # small a + C2 D0B1 ; # small b + C3 D186 ; # small ts + C4 D0B4 ; # small d + C5 D0B5 ; # small ye + C6 D184 ; # small f + C7 D0B3 ; # small g + C8 D185 ; # small kh + C9 D0B8 ; # small i + CA D0B9 ; # small j + CB D0BA ; # small k + CC D0BB ; # small l + CD D0BC ; # small m + CE D0BD ; # small n + CF D0BE ; # small o + + D0 D0BF ; # small p + D1 D18F ; # small ya + D2 D180 ; # small r + D3 D181 ; # small s + D4 D182 ; # small t + D5 D183 ; # small u + D6 D0B6 ; # small zh + D7 D0B2 ; # small v + D8 D18C ; # small soft sign + D9 D18B ; # small y + DA D0B7 ; # small z + DB D188 ; # small sh + DC D18D ; # small e + DD D189 ; # small shch + DE D187 ; # small ch + DF D18A ; # small hard sign + + E0 D0AE ; # capital YU + E1 D090 ; # capital A + E2 D091 ; # capital B + E3 D0A6 ; # capital TS + E4 D094 ; # capital D + E5 D095 ; # capital YE + E6 D0A4 ; # capital F + E7 D093 ; # capital G + E8 D0A5 ; # capital KH + E9 D098 ; # capital I + EA D099 ; # capital J + EB D09A ; # capital K + EC D09B ; # capital L + ED D09C ; # capital M + EE D09D ; # capital N + EF D09E ; # capital O + + F0 D09F ; # capital P + F1 D0AF ; # capital YA + F2 D0A0 ; # capital R + F3 D0A1 ; # capital S + F4 D0A2 ; # capital T + F5 D0A3 ; # capital U + F6 D096 ; # capital ZH + F7 D092 ; # capital V + F8 D0AC ; # capital soft sign + F9 D0AB ; # capital Y + FA D097 ; # capital Z + FB D0A8 ; # capital SH + FC D0AD ; # capital E + FD D0A9 ; # capital SHCH + FE D0A7 ; # capital CH + FF D0AA ; # capital hard sign +} diff --git a/doc/nginx/koi-win b/doc/nginx/koi-win new file mode 100644 index 0000000..72afabe --- /dev/null +++ b/doc/nginx/koi-win @@ -0,0 +1,103 @@ + +charset_map koi8-r windows-1251 { + + 80 88 ; # euro + + 95 95 ; # bullet + + 9A A0 ; #   + + 9E B7 ; # · + + A3 B8 ; # small yo + A4 BA ; # small Ukrainian ye + + A6 B3 ; # small Ukrainian i + A7 BF ; # small Ukrainian yi + + AD B4 ; # small Ukrainian soft g + AE A2 ; # small Byelorussian short u + + B0 B0 ; # ° + + B3 A8 ; # capital YO + B4 AA ; # capital Ukrainian YE + + B6 B2 ; # capital Ukrainian I + B7 AF ; # capital Ukrainian YI + + B9 B9 ; # numero sign + + BD A5 ; # capital Ukrainian soft G + BE A1 ; # capital Byelorussian short U + + BF A9 ; # (C) + + C0 FE ; # small yu + C1 E0 ; # small a + C2 E1 ; # small b + C3 F6 ; # small ts + C4 E4 ; # small d + C5 E5 ; # small ye + C6 F4 ; # small f + C7 E3 ; # small g + C8 F5 ; # small kh + C9 E8 ; # small i + CA E9 ; # small j + CB EA ; # small k + CC EB ; # small l + CD EC ; # small m + CE ED ; # small n + CF EE ; # small o + + D0 EF ; # small p + D1 FF ; # small ya + D2 F0 ; # small r + D3 F1 ; # small s + D4 F2 ; # small t + D5 F3 ; # small u + D6 E6 ; # small zh + D7 E2 ; # small v + D8 FC ; # small soft sign + D9 FB ; # small y + DA E7 ; # small z + DB F8 ; # small sh + DC FD ; # small e + DD F9 ; # small shch + DE F7 ; # small ch + DF FA ; # small hard sign + + E0 DE ; # capital YU + E1 C0 ; # capital A + E2 C1 ; # capital B + E3 D6 ; # capital TS + E4 C4 ; # capital D + E5 C5 ; # capital YE + E6 D4 ; # capital F + E7 C3 ; # capital G + E8 D5 ; # capital KH + E9 C8 ; # capital I + EA C9 ; # capital J + EB CA ; # capital K + EC CB ; # capital L + ED CC ; # capital M + EE CD ; # capital N + EF CE ; # capital O + + F0 CF ; # capital P + F1 DF ; # capital YA + F2 D0 ; # capital R + F3 D1 ; # capital S + F4 D2 ; # capital T + F5 D3 ; # capital U + F6 C6 ; # capital ZH + F7 C2 ; # capital V + F8 DC ; # capital soft sign + F9 DB ; # capital Y + FA C7 ; # capital Z + FB D8 ; # capital SH + FC DD ; # capital E + FD D9 ; # capital SHCH + FE D7 ; # capital CH + FF DA ; # capital hard sign +} diff --git a/doc/nginx/mime.types b/doc/nginx/mime.types new file mode 100644 index 0000000..89be9a4 --- /dev/null +++ b/doc/nginx/mime.types @@ -0,0 +1,89 @@ + +types { + text/html html htm shtml; + text/css css; + text/xml xml; + image/gif gif; + image/jpeg jpeg jpg; + application/javascript js; + application/atom+xml atom; + application/rss+xml rss; + + text/mathml mml; + text/plain txt; + text/vnd.sun.j2me.app-descriptor jad; + text/vnd.wap.wml wml; + text/x-component htc; + + image/png png; + image/tiff tif tiff; + image/vnd.wap.wbmp wbmp; + image/x-icon ico; + image/x-jng jng; + image/x-ms-bmp bmp; + image/svg+xml svg svgz; + image/webp webp; + + application/font-woff woff; + application/java-archive jar war ear; + application/json json; + application/mac-binhex40 hqx; + application/msword doc; + application/pdf pdf; + application/postscript ps eps ai; + application/rtf rtf; + application/vnd.apple.mpegurl m3u8; + application/vnd.ms-excel xls; + application/vnd.ms-fontobject eot; + application/vnd.ms-powerpoint ppt; + application/vnd.wap.wmlc wmlc; + application/vnd.google-earth.kml+xml kml; + application/vnd.google-earth.kmz kmz; + application/x-7z-compressed 7z; + application/x-cocoa cco; + application/x-java-archive-diff jardiff; + application/x-java-jnlp-file jnlp; + application/x-makeself run; + application/x-perl pl pm; + application/x-pilot prc pdb; + application/x-rar-compressed rar; + application/x-redhat-package-manager rpm; + application/x-sea sea; + application/x-shockwave-flash swf; + application/x-stuffit sit; + application/x-tcl tcl tk; + application/x-x509-ca-cert der pem crt; + application/x-xpinstall xpi; + application/xhtml+xml xhtml; + application/xspf+xml xspf; + application/zip zip; + + application/octet-stream bin exe dll; + application/octet-stream deb; + application/octet-stream dmg; + application/octet-stream iso img; + application/octet-stream msi msp msm; + + application/vnd.openxmlformats-officedocument.wordprocessingml.document docx; + application/vnd.openxmlformats-officedocument.spreadsheetml.sheet xlsx; + application/vnd.openxmlformats-officedocument.presentationml.presentation pptx; + + audio/midi mid midi kar; + audio/mpeg mp3; + audio/ogg ogg; + audio/x-m4a m4a; + audio/x-realaudio ra; + + video/3gpp 3gpp 3gp; + video/mp2t ts; + video/mp4 mp4; + video/mpeg mpeg mpg; + video/quicktime mov; + video/webm webm; + video/x-flv flv; + video/x-m4v m4v; + video/x-mng mng; + video/x-ms-asf asx asf; + video/x-ms-wmv wmv; + video/x-msvideo avi; +} diff --git a/doc/nginx/nginx.conf b/doc/nginx/nginx.conf new file mode 100644 index 0000000..81613bc --- /dev/null +++ b/doc/nginx/nginx.conf @@ -0,0 +1,101 @@ +user www-data; +worker_processes 4; +pid /run/nginx.pid; + +events { + worker_connections 768; + # multi_accept on; +} + +http { + + ## + # Basic Settings + ## + + sendfile on; + tcp_nopush on; + tcp_nodelay on; + keepalive_timeout 20; + types_hash_max_size 2048; + # server_tokens off; + + # server_names_hash_bucket_size 64; + # server_name_in_redirect off; + + include /etc/nginx/mime.types; + default_type application/octet-stream; + + ## + # SSL Settings + ## + + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE + ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA'; + ssl_dhparam dhparams.pem; + + ssl_prefer_server_ciphers on; + ssl_session_cache shared:SSL:20m; + ssl_session_timeout 180m; + + ## + # Logging Settings + ## + + access_log /var/log/nginx/access.log; + error_log /var/log/nginx/error.log; + + ## + # Gzip Settings + ## + + gzip on; + gzip_disable "msie6"; + + # gzip_vary on; + # gzip_proxied any; + # gzip_comp_level 6; + # gzip_buffers 16 8k; + # gzip_http_version 1.1; + # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; + + ## + # Phusion Passenger config + ## + # Uncomment it if you installed passenger or passenger-enterprise + ## + + # passenger_root /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini; + # passenger_ruby /usr/bin/passenger_free_ruby; + passenger_root /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini; + passenger_ruby /home/debshots/.rbenv/versions/2.3.1/bin/ruby; + + ## + # Virtual Host Configs + ## + + include /etc/nginx/conf.d/*.conf; + include /etc/nginx/sites-enabled/*; +} + + +#mail { +# # See sample authentication script at: +# # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript +# +# # auth_http localhost/auth.php; +# # pop3_capabilities "TOP" "USER"; +# # imap_capabilities "IMAP4rev1" "UIDPLUS"; +# +# server { +# listen localhost:110; +# protocol pop3; +# proxy on; +# } +# +# server { +# listen localhost:143; +# protocol imap; +# proxy on; +# } +#} diff --git a/doc/nginx/nginx.conf.dpkg-dist b/doc/nginx/nginx.conf.dpkg-dist new file mode 100644 index 0000000..f86b724 --- /dev/null +++ b/doc/nginx/nginx.conf.dpkg-dist @@ -0,0 +1,93 @@ +user www-data; +worker_processes auto; +pid /run/nginx.pid; + +events { + worker_connections 768; + # multi_accept on; +} + +http { + + ## + # Basic Settings + ## + + sendfile on; + tcp_nopush on; + tcp_nodelay on; + keepalive_timeout 65; + types_hash_max_size 2048; + # server_tokens off; + + # server_names_hash_bucket_size 64; + # server_name_in_redirect off; + + include /etc/nginx/mime.types; + default_type application/octet-stream; + + ## + # SSL Settings + ## + + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE + ssl_prefer_server_ciphers on; + + ## + # Logging Settings + ## + + access_log /var/log/nginx/access.log; + error_log /var/log/nginx/error.log; + + ## + # Gzip Settings + ## + + gzip on; + gzip_disable "msie6"; + + # gzip_vary on; + # gzip_proxied any; + # gzip_comp_level 6; + # gzip_buffers 16 8k; + # gzip_http_version 1.1; + # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; + + ## + # Phusion Passenger config + ## + # Uncomment it if you installed passenger or passenger-enterprise + ## + + # include /etc/nginx/passenger.conf; + + ## + # Virtual Host Configs + ## + + include /etc/nginx/conf.d/*.conf; + include /etc/nginx/sites-enabled/*; +} + + +#mail { +# # See sample authentication script at: +# # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript +# +# # auth_http localhost/auth.php; +# # pop3_capabilities "TOP" "USER"; +# # imap_capabilities "IMAP4rev1" "UIDPLUS"; +# +# server { +# listen localhost:110; +# protocol pop3; +# proxy on; +# } +# +# server { +# listen localhost:143; +# protocol imap; +# proxy on; +# } +#} diff --git a/doc/nginx/passenger.conf b/doc/nginx/passenger.conf new file mode 100644 index 0000000..d97abb0 --- /dev/null +++ b/doc/nginx/passenger.conf @@ -0,0 +1,2 @@ +passenger_root /usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini; +passenger_ruby /usr/bin/passenger_free_ruby; diff --git a/doc/nginx/proxy_params b/doc/nginx/proxy_params new file mode 100644 index 0000000..df75bc5 --- /dev/null +++ b/doc/nginx/proxy_params @@ -0,0 +1,4 @@ +proxy_set_header Host $http_host; +proxy_set_header X-Real-IP $remote_addr; +proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; +proxy_set_header X-Forwarded-Proto $scheme; diff --git a/doc/nginx/scgi_params b/doc/nginx/scgi_params new file mode 100644 index 0000000..6d4ce4f --- /dev/null +++ b/doc/nginx/scgi_params @@ -0,0 +1,17 @@ + +scgi_param REQUEST_METHOD $request_method; +scgi_param REQUEST_URI $request_uri; +scgi_param QUERY_STRING $query_string; +scgi_param CONTENT_TYPE $content_type; + +scgi_param DOCUMENT_URI $document_uri; +scgi_param DOCUMENT_ROOT $document_root; +scgi_param SCGI 1; +scgi_param SERVER_PROTOCOL $server_protocol; +scgi_param REQUEST_SCHEME $scheme; +scgi_param HTTPS $https if_not_empty; + +scgi_param REMOTE_ADDR $remote_addr; +scgi_param REMOTE_PORT $remote_port; +scgi_param SERVER_PORT $server_port; +scgi_param SERVER_NAME $server_name; diff --git a/doc/nginx/default b/doc/nginx/sites-available/default similarity index 96% rename from doc/nginx/default rename to doc/nginx/sites-available/default index a033186..09f8f52 100644 --- a/doc/nginx/default +++ b/doc/nginx/sites-available/default @@ -51,6 +51,11 @@ server { add_header X-Cache-Status $upstream_cache_status; + # Tell the backend if the protocol used was HTTPS. Otherwise you get an infinite + # redirection loop because the backend assumes that HTTP was spoken behind the + # proxy. + proxy_set_header X-Forwarded-Proto $scheme; + # Pass on the actual HTTP_HOST ("Host:" header) so that Rails can build proper absolute URLs #proxy_set_header Host $http_host; proxy_set_header Host $host; diff --git a/doc/nginx/sites-available/default.dpkg-dist b/doc/nginx/sites-available/default.dpkg-dist new file mode 100644 index 0000000..116a4f2 --- /dev/null +++ b/doc/nginx/sites-available/default.dpkg-dist @@ -0,0 +1,87 @@ +## +# You should look at the following URL's in order to grasp a solid understanding +# of Nginx configuration files in order to fully unleash the power of Nginx. +# http://wiki.nginx.org/Pitfalls +# http://wiki.nginx.org/QuickStart +# http://wiki.nginx.org/Configuration +# +# Generally, you will want to move this file somewhere, and start with a clean +# file but keep this around for reference. Or just disable in sites-enabled. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +# Default server configuration +# +server { + listen 80 default_server; + listen [::]:80 default_server; + + # SSL configuration + # + # listen 443 ssl default_server; + # listen [::]:443 ssl default_server; + # + # Note: You should disable gzip for SSL traffic. + # See: https://bugs.debian.org/773332 + # + # Read up on ssl_ciphers to ensure a secure configuration. + # See: https://bugs.debian.org/765782 + # + # Self signed certs generated by the ssl-cert package + # Don't use them in a production server! + # + # include snippets/snakeoil.conf; + + root /var/www/html; + + # Add index.php to the list if you are using PHP + index index.html index.htm index.nginx-debian.html; + + server_name _; + + location / { + # First attempt to serve request as file, then + # as directory, then fall back to displaying a 404. + try_files $uri $uri/ =404; + } + + + # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 + # + #location ~ \.php$ { + # include snippets/fastcgi-php.conf; + # + # # With php5-cgi alone: + # fastcgi_pass 127.0.0.1:9000; + # # With php5-fpm: + # fastcgi_pass unix:/run/php5-fpm.sock; + #} + + # deny access to .htaccess files, if Apache's document root + # concurs with nginx's one + # + #location ~ /\.ht { + # deny all; + #} +} + + +# Virtual Host configuration for example.com +# +# You can move that to a different file under sites-available/ and symlink that +# to sites-enabled/ to enable it. +# +#server { +# listen 80; +# listen [::]:80; +# +# server_name example.com; +# +# root /var/www/example.com; +# index index.html; +# +# location / { +# try_files $uri $uri/ =404; +# } +#} diff --git a/doc/nginx/sites-available/works b/doc/nginx/sites-available/works new file mode 100644 index 0000000..0ba81be --- /dev/null +++ b/doc/nginx/sites-available/works @@ -0,0 +1,171 @@ +## +# You should look at the following URL's in order to grasp a solid understanding +# of Nginx configuration files in order to fully unleash the power of Nginx. +# http://wiki.nginx.org/Pitfalls +# http://wiki.nginx.org/QuickStart +# http://wiki.nginx.org/Configuration +# +# Generally, you will want to move this file somewhere, and start with a clean +# file but keep this around for reference. Or just disable in sites-enabled. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +#proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=assets:768m use_temp_path=off; + +#add_header X-Cache-Status $upstream_cache_status; +#add_header X-Runtime 42; +more_clear_headers 'X-Runtime'; +more_clear_headers 'X-Powered-By'; +more_clear_headers 'Server'; +server_tokens off; + +#proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=my_cache:10m max_size=10g inactive=60m use_temp_path=off; + +#passenger_show_version_in_header off; + +#log_format proxy '[$time_local] Cache: $upstream_cache_status $upstream_addr $upstream_response_time $status $bytes_sent $proxy_add_x_forwarded_for $request_uri "$http_referer" "$http_user_agent"'; +#access_log /var/log/nginx/debshots-access.log proxy; + +# Default server configuration +# +#passenger_log_level 5; + +# Performance +passenger_max_pool_size 8; +passenger_max_request_queue_size 200; + +#limit_req_zone $binary_remote_addr zone=one:10m rate=5r/s; + + +server { + listen 85.25.83.22:80 default_server; + listen 85.25.83.22:443 ssl; + ssl_certificate ssl/screenshots.debian.net.crt; + ssl_certificate_key ssl/screenshots.debian.net.key; + + #listen 80 default_server; + #listen [::]:80 default_server; + + # SSL configuration + # + # listen 443 ssl default_server; + # listen [::]:443 ssl default_server; + # + # Self signed certs generated by the ssl-cert package + # Don't use them in a production server! + # + # include snippets/snakeoil.conf; + + #passenger_pass_header X-Accel-Redirect; + + #proxy_cache_methods GET HEAD; + + root /home/debshots/debshots/public; + + # Add index.php to the list if you are using PHP + #index index.html index.htm index.nginx-debian.html; + + server_name _; + #proxy_cache assets; + #add_header X-Cache-Status $upstream_cache_status; + #proxy_ignore_headers Cache-Control; + + #add_header X-Debian rocks; + + passenger_enabled on; + passenger_ruby /home/debshots/.rbenv/versions/2.3.1/bin/ruby; + #limit_req zone=one burst=5; + + #location / { + # try_files /maintenance.html @passenger; + #} +# +# location @passenger { +# #passenger_enabled on; +# #rails_env production; +# passenger_enabled on; +# passenger_ruby /home/debshots/.rbenv/versions/2.3.1/bin/ruby; +# #limit_req zone=one burst=5; +# add_header X-Coffee app; +## } + + location /assets/ { + alias /home/debshots/debshots/public/assets/; + expires 1h; + #include debshots_params; + add_header X-Coffee assets; + } + location /logo/ { + alias /home/debshots/debshots/public/logo/; + expires 1h; + add_header X-Coffee logo; + } + location /screenshots/ { + alias /home/debshots/debshots/public/screenshots/; + expires max; + add_header X-Coffee screenshots; + } + location /images/ { + alias /home/debshots/debshots/public/images/; + expires 1h; + add_header X-Coffee images; + } + + # Send thumbnails using X-Sendfile / X-Accel-Redirect + # The correct thumbnail is computed by the Rails application so it cannot be served directly. + location /thumbnail/ { + expires 1h; + add_header X-Coffee thumbnail; + + passenger_set_header X-Sendfile-Type "X-Accel-Redirect"; + passenger_env_var HTTP_X_ACCEL_MAPPING /home/debshots/debshots/public/=/__send_file_accel/; + passenger_pass_header X-Accel-Redirect; + } + + # Send public assets using X-Sendfile / X-Accel-Redirect (e.g. public/images/dummy/...) + location /public/ { + expires 1h; + add_header X-Coffee public; + + passenger_set_header X-Sendfile-Type "X-Accel-Redirect"; + passenger_env_var HTTP_X_ACCEL_MAPPING /home/debshots/debshots/public/=/__send_file_accel/; + passenger_pass_header X-Accel-Redirect; + } + + location /__send_file_accel/ { + internal; + alias /home/debshots/debshots/public/; + add_header X-Coffee accel; + expires 1d; + more_clear_headers 'Set-Cookie'; + } + + location /secretstatus { + stub_status on; + access_log off; + allow all; + add_header X-Coffee status; + #deny all; + } +} + + +# Virtual Host configuration for example.com +# +# You can move that to a different file under sites-available/ and symlink that +# to sites-enabled/ to enable it. +# +#server { +# listen 80; +# listen [::]:80; +# +# server_name example.com; +# +# root /var/www/example.com; +# index index.html; +# +# location / { +# try_files $uri $uri/ =404; +# } +#} diff --git a/doc/nginx/sites-available/works2 b/doc/nginx/sites-available/works2 new file mode 100644 index 0000000..169e2bd --- /dev/null +++ b/doc/nginx/sites-available/works2 @@ -0,0 +1,207 @@ +## +# You should look at the following URL's in order to grasp a solid understanding +# of Nginx configuration files in order to fully unleash the power of Nginx. +# http://wiki.nginx.org/Pitfalls +# http://wiki.nginx.org/QuickStart +# http://wiki.nginx.org/Configuration +# +# Generally, you will want to move this file somewhere, and start with a clean +# file but keep this around for reference. Or just disable in sites-enabled. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +#proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=assets:768m use_temp_path=off; + +#add_header X-Cache-Status $upstream_cache_status; +#add_header X-Runtime 42; +more_clear_headers 'X-Runtime'; +more_clear_headers 'X-Powered-By'; +more_clear_headers 'Server'; +server_tokens off; + +proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=my_cache:10m max_size=10g inactive=60m use_temp_path=off; + +log_format proxy '[$time_local] Cache: $upstream_cache_status $upstream_addr $upstream_response_time $status $bytes_sent $proxy_add_x_forwarded_for $request_uri "$http_referer" "$http_user_agent"'; + +#passenger_show_version_in_header off; + +#log_format proxy '[$time_local] Cache: $upstream_cache_status $upstream_addr $upstream_response_time $status $bytes_sent $proxy_add_x_forwarded_for $request_uri "$http_referer" "$http_user_agent"'; + +# Default server configuration +# +#passenger_log_level 5; + +# Performance +passenger_max_pool_size 8; +passenger_max_request_queue_size 200; + +#limit_req_zone $binary_remote_addr zone=one:10m rate=5r/s; + +# Frontend caching and static asset delivery +server { + listen 85.25.83.22:80 default_server; + listen 85.25.83.22:443 ssl; + ssl_certificate ssl/screenshots.debian.net.crt; + ssl_certificate_key ssl/screenshots.debian.net.key; + + root /home/debshots/debshots/public; + server_name _; + access_log /var/log/nginx/cache-access.log proxy; + + add_header X-Cache-Status $upstream_cache_status; + + location / { + try_files /maintenance.html @backend; + } + + location /json/package/0ad { + #try_files /maintenance.html @backend; + + proxy_ignore_headers X-Accel-Expires Expires Cache-Control Set-Cookie; + expires 1d; + proxy_cache my_cache; + proxy_pass http://127.0.0.1:8888; + proxy_cache_valid 200 1d; + #proxy_cache_use_stale error timeout http_500 http_502 http_503 http_504; + } + + location /json/ { + #try_files /maintenance.html @backend; + try_files /_maintenance.html /foo.html; + } + + location /favicon.ico { + try_files /maintenance.html @backend; + } + + location @backend { + proxy_ignore_headers "Cache-Control"; + proxy_hide_header "Cache-Control"; + proxy_ignore_headers "Set-Cookie"; + proxy_hide_header "Set-Cookie"; + proxy_cache my_cache; + proxy_pass http://127.0.0.1:8888; + + # Avoid cache stampede - rather update once and deliver stale content + proxy_cache_lock on; + proxy_cache_use_stale updating; + + expires 1d; + more_clear_headers 'Set-Cookie'; + more_clear_headers 'Cache-Control'; + more_clear_headers 'ETag'; + add_header X-Coffee json; + } + + location /assets/ { + alias /home/debshots/debshots/public/assets/; + expires 1h; + add_header X-Coffee assets; + } + location /logo/ { + alias /home/debshots/debshots/public/logo/; + expires 1h; + add_header X-Coffee logo; + } + location /screenshots/ { + alias /home/debshots/debshots/public/screenshots/; + expires max; + add_header X-Coffee screenshots; + } + location /images/ { + alias /home/debshots/debshots/public/images/; + expires 1h; + add_header X-Coffee images; + } +} + +# Backend rails application +server { + #listen 85.25.83.22:80 default_server; + #listen 85.25.83.22:443 ssl; + #ssl_certificate ssl/screenshots.debian.net.crt; + #ssl_certificate_key ssl/screenshots.debian.net.key; + listen 127.0.0.1:8888; + + root /home/debshots/debshots/public; + + server_name _; + access_log /var/log/nginx/rails-access.log; + + passenger_enabled on; + passenger_ruby /home/debshots/.rbenv/versions/2.3.1/bin/ruby; + #expires 1d; + #limit_req zone=one burst=5; + + #location / { + # try_files /maintenance.html @passenger; + #} +# +# location @passenger { +# #passenger_enabled on; +# #rails_env production; +# passenger_enabled on; +# passenger_ruby /home/debshots/.rbenv/versions/2.3.1/bin/ruby; +# #limit_req zone=one burst=5; +# add_header X-Coffee app; +## } + + + # Send thumbnails using X-Sendfile / X-Accel-Redirect + # The correct thumbnail is computed by the Rails application so it cannot be served directly. + location /thumbnail/ { + expires 1h; + add_header X-Coffee thumbnail; + + passenger_set_header X-Sendfile-Type "X-Accel-Redirect"; + passenger_env_var HTTP_X_ACCEL_MAPPING /home/debshots/debshots/public/=/__send_file_accel/; + passenger_pass_header X-Accel-Redirect; + } + + # Send public assets using X-Sendfile / X-Accel-Redirect (e.g. public/images/dummy/...) + location /public/ { + expires 1h; + add_header X-Coffee public; + + passenger_set_header X-Sendfile-Type "X-Accel-Redirect"; + passenger_env_var HTTP_X_ACCEL_MAPPING /home/debshots/debshots/public/=/__send_file_accel/; + passenger_pass_header X-Accel-Redirect; + } + + location /__send_file_accel/ { + internal; + alias /home/debshots/debshots/public/; + add_header X-Coffee accel; + expires 1d; + more_clear_headers 'Set-Cookie'; + } + + location /secretstatus { + stub_status; + access_log off; + allow all; + add_header X-Coffee status; + #deny all; + } +} + + +# Virtual Host configuration for example.com +# +# You can move that to a different file under sites-available/ and symlink that +# to sites-enabled/ to enable it. +# +#server { +# listen 80; +# listen [::]:80; +# +# server_name example.com; +# +# root /var/www/example.com; +# index index.html; +# +# location / { +# try_files $uri $uri/ =404; +# } +#} diff --git a/doc/nginx/sites-enabled/default b/doc/nginx/sites-enabled/default new file mode 120000 index 0000000..ad35b83 --- /dev/null +++ b/doc/nginx/sites-enabled/default @@ -0,0 +1 @@ +/etc/nginx/sites-available/default \ No newline at end of file diff --git a/doc/nginx/snippets/fastcgi-php.conf b/doc/nginx/snippets/fastcgi-php.conf new file mode 100644 index 0000000..8f8e4a2 --- /dev/null +++ b/doc/nginx/snippets/fastcgi-php.conf @@ -0,0 +1,13 @@ +# regex to split $uri to $fastcgi_script_name and $fastcgi_path +fastcgi_split_path_info ^(.+\.php)(/.+)$; + +# Check that the PHP script exists before passing it +try_files $fastcgi_script_name =404; + +# Bypass the fact that try_files resets $fastcgi_path_info +# see: http://trac.nginx.org/nginx/ticket/321 +set $path_info $fastcgi_path_info; +fastcgi_param PATH_INFO $path_info; + +fastcgi_index index.php; +include fastcgi.conf; diff --git a/doc/nginx/snippets/snakeoil.conf b/doc/nginx/snippets/snakeoil.conf new file mode 100644 index 0000000..ad26c3e --- /dev/null +++ b/doc/nginx/snippets/snakeoil.conf @@ -0,0 +1,5 @@ +# Self signed certificates generated by the ssl-cert package +# Don't use them in a production server! + +ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem; +ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key; diff --git a/doc/nginx/ssl/2011/screenshots.debian.net.crt b/doc/nginx/ssl/2011/screenshots.debian.net.crt new file mode 100644 index 0000000..1f35754 --- /dev/null +++ b/doc/nginx/ssl/2011/screenshots.debian.net.crt @@ -0,0 +1,61 @@ +-----BEGIN CERTIFICATE----- +MIIF+jCCBOKgAwIBAgIQF6Jc2IykSaiar44t4U6e2DANBgkqhkiG9w0BAQUFADBB +MQswCQYDVQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMR4wHAYDVQQDExVHYW5k +aSBTdGFuZGFyZCBTU0wgQ0EwHhcNMTQwMjExMDAwMDAwWhcNMTUwMjExMjM1OTU5 +WjBhMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsT +EkdhbmRpIFN0YW5kYXJkIFNTTDEfMB0GA1UEAxMWc2NyZWVuc2hvdHMuZGViaWFu +Lm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALdu6YXrPbuYvc0d +xLkgfjrO0Z48O6T8ojdHCpPzNXAAQPAl/TiqCH7EIeGtFJjzW2IVX4lovqfItw4X +byRUEJjdrQ6lql3eZSPUXFPW2xKTtTHS6B2GfxxYPKu0jKoVSm/wN1BsTi3NigxM +P7SvB3WiobTA8xtYKsYevQdP04RZb7DvfuXebTfuWV9lTLCef7WbE/SCc1EN+4hR +mHZ1uoQIqsz34+K1pzzxDN9bn5oFs9kfqpr5CIWTY2gRfT7weLVOggEtkylgd8sp +h86xsq3r/4TmHrAu9XqTOXoLD7LWqTmptq/AA5DEJGcQEKRfXx0wKnXJw4YFpvb0 +InzmUr0Lxd8e99hDAFd4/ervCvHREO96wGzDM1vprig4ajzpsxV/EdOyI43s1sej +rTx+03X+aUIIMlhYLabs7V1k85XLlC9IqKnM1aE1Sh3uADHkK4+e+XIeMPG731YF +axV5f082qgX9Po22PpL3Y+SOSXAfQ45ZVfRH5KE4jnyX9Fv3vx+fq8SlgxnlHD93 +OriP9ZPinK6PERqQFxnYXhLnP0WT7xk54n2zv3nAtJmpxq6c95I/dezwzm/2RlqG +oGajjqsYcpe4ShdTVKA9d6RIbYnnIF7N3gLjlZF+kP+hhItzZv8GKNlgxi4j4UTm +dG8pkLEXOvWLWzYQ6SqZ6Fsyx+FpAgMBAAGjggHMMIIByDAfBgNVHSMEGDAWgBS2 +qP+iqC/Qps1LsWjz51AQMad5ITAdBgNVHQ4EFgQUX2IYp3lBfNfuDZbT3Hyx4HZI +xwUwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYB +BQUHAwEGCCsGAQUFBwMCMGAGA1UdIARZMFcwSwYLKwYBBAGyMQECAhowPDA6Bggr +BgEFBQcCARYuaHR0cDovL3d3dy5nYW5kaS5uZXQvY29udHJhY3RzL2ZyL3NzbC9j +cHMvcGRmLzAIBgZngQwBAgEwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybC5n +YW5kaS5uZXQvR2FuZGlTdGFuZGFyZFNTTENBLmNybDBqBggrBgEFBQcBAQReMFww +NwYIKwYBBQUHMAKGK2h0dHA6Ly9jcnQuZ2FuZGkubmV0L0dhbmRpU3RhbmRhcmRT +U0xDQS5jcnQwIQYIKwYBBQUHMAGGFWh0dHA6Ly9vY3NwLmdhbmRpLm5ldDA9BgNV +HREENjA0ghZzY3JlZW5zaG90cy5kZWJpYW4ubmV0ghp3d3cuc2NyZWVuc2hvdHMu +ZGViaWFuLm5ldDANBgkqhkiG9w0BAQUFAAOCAQEAFS4Wnaw+qN6iUI9lvgpglqOU +CrIDCn1RI9Egpkio7TwLauBPsxxAjfBKzCQTOeSjBgewrhn/L3euqbI8UtQY8+dG +l1Luohg8KFf7+zAqnLMf6w0tsTe5/BCxzPHvUCX1TSCI8E0Gux7qJ91TqBNY7jqh +rmIdjm2f0qZ3HxAD/2L9NN8moPWOZ7AYKHt9ZZ1+NgTwlJMINKSFBwzZUbK7js8a +i7q6oh7dGYH49x7oc/03FF1JQwgHjlA58PIVEBr0jPkfVVNV9KYitRAT7K38yy/q +n6HlfWJj8lafjlAFfyJlZfGmubtgevxULBCt2kIjQmEocZ/2k6XxyaH8ft1YKA== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIEozCCA4ugAwIBAgIQWrYdrB5NogYUx1U9Pamy3DANBgkqhkiG9w0BAQUFADCB +lzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug +Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExho +dHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xHzAdBgNVBAMTFlVUTi1VU0VSRmlyc3Qt +SGFyZHdhcmUwHhcNMDgxMDIzMDAwMDAwWhcNMjAwNTMwMTA0ODM4WjBBMQswCQYD +VQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMR4wHAYDVQQDExVHYW5kaSBTdGFu +ZGFyZCBTU0wgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VD2l +2w0ieFBqWiOJP5eh1AcaqVgIm6AVwzK2t/HouaVvrTf2bnEbtHUtSF6fxhWqge/l +xIiVijpsd8y1zWXkZ+VzyVBSlMEnST6ga0EWQbaUmUGuPsviBkYJ6U2+yUxVqRh+ +pt9u/UqyzGxO2chQFZOz8unjwmqtOtX7w3lQnyV5KbJHZHwgPuIITZMpFLY0bs9x +Rn52EPT9bKoB0sIG3pKDzFiQLpLeHmW3Yy89sutwjEzgvhWd3sFNVvgLxo4HuV3f +lfB7QB8aLNecK0t29Fn1Q8EsZhCenmaWYJ0cdBtOGFwIsG5symkaAum7ynjvZi7j +Mv1BXJV0gU302v5LAgMBAAGjggE+MIIBOjAfBgNVHSMEGDAWgBShcl8mGyiYQ5Vd +BzfVhZadS9LDRTAdBgNVHQ4EFgQUtqj/oqgv0KbNS7Fo8+dQEDGneSEwDgYDVR0P +AQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQAwGAYDVR0gBBEwDzANBgsrBgEE +AbIxAQICGjBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5j +b20vVVROLVVTRVJGaXJzdC1IYXJkd2FyZS5jcmwwdAYIKwYBBQUHAQEEaDBmMD0G +CCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVROQWRkVHJ1c3RT +ZXJ2ZXJfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu +Y29tMA0GCSqGSIb3DQEBBQUAA4IBAQAZU78DPZvia1r9ukkfT+zhxoI5PNIDBA+r +ez6CqYUQH/TeMq9YP/9w8zAdly1MmuLsDD4ULS+YSJ2uFmqsLUKqtWSkcLvrc5R7 +RkznehR2W0wdhKEgdB8uS1xwiNy99xk97VkN4j8m4pyspDyVHPi+jAOu8OWcTbzH +m1gAv6+t+jducW0YNA7B6mr4Dd9pVFYV8iiz/qRj7MUEZGC7/irw9IehsK69quQv +4wMLL2ZfhaQye0btJQzn8bfnGf1gul+Hd96YB5bkXupjfajeVdphXDyQg0MEBzzd +8/ifBlIK3se2e4/hEfcEejX/arxbx1BJCHBvlEPNnsdw8dvQbdqP +-----END CERTIFICATE----- diff --git a/doc/nginx/ssl/2011/screenshots.debian.net.key b/doc/nginx/ssl/2011/screenshots.debian.net.key new file mode 100644 index 0000000..675af9a --- /dev/null +++ b/doc/nginx/ssl/2011/screenshots.debian.net.key @@ -0,0 +1,52 @@ +-----BEGIN PRIVATE KEY----- +MIIJRAIBADANBgkqhkiG9w0BAQEFAASCCS4wggkqAgEAAoICAQC3bumF6z27mL3N +HcS5IH46ztGePDuk/KI3RwqT8zVwAEDwJf04qgh+xCHhrRSY81tiFV+JaL6nyLcO +F28kVBCY3a0Opapd3mUj1FxT1tsSk7Ux0ugdhn8cWDyrtIyqFUpv8DdQbE4tzYoM +TD+0rwd1oqG0wPMbWCrGHr0HT9OEWW+w737l3m037llfZUywnn+1mxP0gnNRDfuI +UZh2dbqECKrM9+Pitac88QzfW5+aBbPZH6qa+QiFk2NoEX0+8Hi1ToIBLZMpYHfL +KYfOsbKt6/+E5h6wLvV6kzl6Cw+y1qk5qbavwAOQxCRnEBCkX18dMCp1ycOGBab2 +9CJ85lK9C8XfHvfYQwBXeP3q7wrx0RDvesBswzNb6a4oOGo86bMVfxHTsiON7NbH +o608ftN1/mlCCDJYWC2m7O1dZPOVy5QvSKipzNWhNUod7gAx5CuPnvlyHjDxu99W +BWsVeX9PNqoF/T6Ntj6S92PkjklwH0OOWVX0R+ShOI58l/Rb978fn6vEpYMZ5Rw/ +dzq4j/WT4pyujxEakBcZ2F4S5z9Fk+8ZOeJ9s795wLSZqcaunPeSP3Xs8M5v9kZa +hqBmo46rGHKXuEoXU1SgPXekSG2J5yBezd4C45WRfpD/oYSLc2b/BijZYMYuI+FE +5nRvKZCxFzr1i1s2EOkqmehbMsfhaQIDAQABAoICAFa4GbCVKQcyS7DX/PPkd6jH +s/PR2ATE5s+pR0fwt/euNwURgKg0QnXjtXzifZVdn3s8TYFBwrjBvEDuNT4AfCQ4 +0KLXETb1d+07bTa5obIjoIrggZnLxvYYhP5MCiAylpFbCFt+CGvA+x2bQpbiFG25 +qCcy/PuVcAtf5s+5Hm84dQQ6BU0ZHZtOlHP0CRCKriemHAYBUhEkwiCNKr3+JGJd +Upo6K0M3y8uUzhgeUdLYFVF1lgtT5oJ3zowZkJObzgUxC2cRK7xo/dlPVgQSoD13 +D8K9pA549NaxGYAoEJDkyPYY1OQ7q7PZ9re+sY90AxxidABhlY0byPaBLnjLzpsB +1oFGgq4xzXX4p3/ksD7yLqR62DYGSaSd1ahwjP2o4XmDanQa1MvOK7glqS+T9jjb +iWe3bQ17Aka1GwNFj7pVlZabDvEo1K9K9WiYX4bnzn8buf0y68XDuaWOjEnBgMeL +qI+CTPCCD8bln7MJx02gEX6MHIDSEPyf8LHI4aFBYFLJXA2zU//pC1ewhuhWy5+Q +zokulOzCEf6meUY8Emd8UQjpjYgtFCVSkrdrmrW8Ws6JsrNMt/C5ZvVGbHf7/JK4 +jjkQEQOwxx4qZ+eEM/Hs4RKT02oQk3fbCy4fPY86vMgUc9fDYeK7TnfO2AV9a/nr +D8wp/YXWCE/8H7xISzXNAoIBAQDmk5rK3xEEe/dC1RgbyOxYoPtLbgBIsjL6H1An +m4no01xAFOJL0kNL6yWwiQ7f0kliudjip+W9J+01JAjrCgClKAQkEj4ocFB1Rf/f +3pJ4JrBCCqcSMmBxsq63mzTbEl+vETRY6cZMGbxMmleJmf33jqwlsQg4EVEGKbNp +TCnTQkMtQ7SnmlsZ+BtQEWssO+263hjp6M7+ZJPoMWhwrhHazdx6opTMBBtntd1X +x8tni5V91tO1EEV78Yo0QmtYJ2+BLRKcZRqmSbDeYi8826xZLjanGDe1TT9Wvddt +8UIofJ/jBcNkMqLdtlTUqO18vS56IYfTF9g7xoxT4flUYOFXAoIBAQDLqJxy7uOu +GRidfvCm0gy4suzLR/CJFR52juqFxwWDxvDarjAYCd1IHBcRpOH3smqrpXf+9NZv +CMjzc/Ut0F20mx1ySvK4kOhptzq4TocT3LE00Swf9QKj4uQZOM02NHoZGbKPJoKP ++dk9477+qtce9rkflQzcD9bel4EDEYKBJeEiaMwepeYfhEdaSync42Fj78e3K0I3 +RgeEP8NdHxMQPPK502IBSRO2xFXtdI+ELSjRC7f6qiZ3uRMjYT3x9L+ov1aruIlI +QdUK3vD1XUf+o7U+j4rZKkQryEYZrtiwAh6txpnSny1E2jHajXn6nVzUGPbKK7ht +ZakrFToRTds/AoIBAQCy/BdnrbqvCW/J8FKzlsdokSYgynXr+HA72rzE0ic+lXuB +vvRfOQvGTfXG0M28DqeqvGtQnlZm/CxVWPCXSv9vNN3qBkM77tt1/W1/oW1/WUDv +Mwe3x2U4PSUFH7Tq7Zta8Xb6IhYtErkpmZGkHeaYGacl5wNjSoXjy9EaRuYcuM4e +v/TnOZnIUeEZyTuxbZ+/tBIQ2Qh9TyPFVT0mYuk3OSASDkyFBhcj7XexYUVSznav +5WgXoFbfvIK0yG49UvdqhctxncYPGRrztbHHgxqJa6c/FDyCP0GQmvM0w9fAR+Vx +PBMNn4TvqE63eZ5Iey4t3gNqaJMQ67IYl0yNJFsnAoIBAQCfPISm8NYgiArRCjHL +nazItU2kW+lcpaCd/nysgMJ1GJW1xkBga0YTXbND3nG4JE53SveZ54HKa0oD4ISx +f5vk3OuXM7a4TMUL83H8LZo8E3CS5YHkssOPtJW4issZOMrG2WrdtrSbMjWDyJDL +unRdB3gTk4zse437mOYMqiIqLJ3tM5d11y0pM1o+5UokJb0+UHsNYstxQFYcN2bf +Zq6XIbB/TyHv811wp+6vrVWReWXSnaEKYwOU1KZ8IUo35q/8ly6DMdRVJPQYfdxV +XMwv83yBH+bmib+no/37ktRmOiIWqZQYNNFGZnxYcAoRw/yS8bn0tV6MWtJ8lypB +4WgtAoIBAQCRHlqg3xpVnKVcojz/czUVwRM6uWkBHZyt5m0ojwiBzD6/YnsCq6oe +nStz+X/7rFKuWJPQauauE08elcFRoJy7II0xzVwZ8EV8H3Qpccd73oto8ygKyDHf +6gCZWLoC4b9JFHh7Vbs2jz1L6kkKeEL77iq5hcOD0lS+Ky7NuLGBNCEmv4+cQ1n3 +xv8bSjxtKU2HTJzHLJ5hTWlbZrU+s70YHaTY00B0RblXjwj7EgAeg4RiVQXnmJXq +TiRYd/KaG44QqYJ2URb7NkkJP/18J74RauP9k4yfnbm4XYYwgYIiz5YhSbh84c3Y ++NCdzwaqEjw2KOXW1TjWWWETIZuh7IXs +-----END PRIVATE KEY----- diff --git a/doc/nginx/ssl/screenshots.debian.net.crt b/doc/nginx/ssl/screenshots.debian.net.crt new file mode 100644 index 0000000..b5460bd --- /dev/null +++ b/doc/nginx/ssl/screenshots.debian.net.crt @@ -0,0 +1,98 @@ +-----BEGIN CERTIFICATE----- +MIIFEjCCA/qgAwIBAgIRAL/YYnl8IOX8JwWB+NpqTN4wDQYJKoZIhvcNAQELBQAw +XzELMAkGA1UEBhMCRlIxDjAMBgNVBAgTBVBhcmlzMQ4wDAYDVQQHEwVQYXJpczEO +MAwGA1UEChMFR2FuZGkxIDAeBgNVBAMTF0dhbmRpIFN0YW5kYXJkIFNTTCBDQSAy +MB4XDTE1MDExMzAwMDAwMFoXDTE3MDMxMjIzNTk1OVowYTEhMB8GA1UECxMYRG9t +YWluIENvbnRyb2wgVmFsaWRhdGVkMRswGQYDVQQLExJHYW5kaSBTdGFuZGFyZCBT +U0wxHzAdBgNVBAMTFnNjcmVlbnNob3RzLmRlYmlhbi5uZXQwggEiMA0GCSqGSIb3 +DQEBAQUAA4IBDwAwggEKAoIBAQC0QybbIT5MMZgmDONX2hY/oezY5pz9p3CfcQkc +I4y5GcWRtTKDn46y+gmcQA9wHZTHKMT7tEsGAx7/55KaG2TtNqoZnhmyRYG7MDIg +bztbdYA0/RwlVp/iVmqsc5Wsq7/ZmU/aIB2WDH6V2cWJgJoJ0LQMj/nCBRqS4n3+ +YZxSr0fTrmBROHjw6pIp7AouVJ0NVeG8lnkhYXlqBpK+qmCyhj54UpvXVAYeoiS5 +Qbld8kpQKZYvUdOnJyY2xUIaeGbIrQFRS6QAkSgi7B+ZkJkt06mGKwB6hLH6M2kL +UlKANIIEYVuMEYk2jYQL+pIdBDRlHpp5r3H6F11ZPctYP+INAgMBAAGjggHFMIIB +wTAfBgNVHSMEGDAWgBSzkKfYya9OzWE8n3ytXX9B/Wkw6jAdBgNVHQ4EFgQUxfoL +wPdHyJb6SwhYF0uesh28NlwwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw +HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYLKwYB +BAGyMQECAhowJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0LmNv +bTAIBgZngQwBAgEwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC51c2VydHJ1 +c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8 +BggrBgEFBQcwAoYwaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRh +cmRTU0xDQTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu +Y29tMD0GA1UdEQQ2MDSCFnNjcmVlbnNob3RzLmRlYmlhbi5uZXSCGnd3dy5zY3Jl +ZW5zaG90cy5kZWJpYW4ubmV0MA0GCSqGSIb3DQEBCwUAA4IBAQAtcPKcIeq6iFap +EaEuVIOpbfPQn1sF3tsKWGb9waHFBZX35BSXoie/IoxJk5m+MIu8UH+PTgcXPIGc +95eNxbLa+59RjTd3GRyLr7Gscfl1JuR1HzpBiW77q4nJUQoh+kNaeOmqHESi8kGv +2Fe6mVINlkyWyK2Gx337kUvQYKuowgqprVsrHNi9YI1H7d8VhaAiWQeD1AyAvi8W +roF9FiMmkOkTtAkoo28D2L1OkBW7PLgAT2J/zSI4Nf26duZmvETNn85NfLicGuTh +z3z+p6RVI6Rl7LitFvbnuaVCe7xysseCuXYg8uZAjQq+mN1LkdrDKbY+5e1/9ghl +yeR6Uwhu +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIF6TCCA9GgAwIBAgIQBeTcO5Q4qzuFl8umoZhQ4zANBgkqhkiG9w0BAQwFADCB +iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl +cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV +BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQw +OTEyMDAwMDAwWhcNMjQwOTExMjM1OTU5WjBfMQswCQYDVQQGEwJGUjEOMAwGA1UE +CBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4wDAYDVQQKEwVHYW5kaTEgMB4GA1UE +AxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB +DwAwggEKAoIBAQCUBC2meZV0/9UAPPWu2JSxKXzAjwsLibmCg5duNyj1ohrP0pIL +m6jTh5RzhBCf3DXLwi2SrCG5yzv8QMHBgyHwv/j2nPqcghDA0I5O5Q1MsJFckLSk +QFEW2uSEEi0FXKEfFxkkUap66uEHG4aNAXLy59SDIzme4OFMH2sio7QQZrDtgpbX +bmq08j+1QvzdirWrui0dOnWbMdw+naxb00ENbLAb9Tr1eeohovj0M1JLJC0epJmx +bUi8uBL+cnB89/sCdfSN3tbawKAyGlLfOGsuRTg/PwSWAP2h9KK71RfWJ3wbWFmV +XooS/ZyrgT5SKEhRhWvzkbKGPym1bgNi7tYFAgMBAAGjggF1MIIBcTAfBgNVHSME +GDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUs5Cn2MmvTs1hPJ98 +rV1/Qf1pMOowDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYD +VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCIGA1UdIAQbMBkwDQYLKwYBBAGy +MQECAhowCAYGZ4EMAQIBMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNl +cnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNy +bDB2BggrBgEFBQcBAQRqMGgwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRy +dXN0LmNvbS9VU0VSVHJ1c3RSU0FBZGRUcnVzdENBLmNydDAlBggrBgEFBQcwAYYZ +aHR0cDovL29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQwFAAOCAgEAWGf9 +crJq13xhlhl+2UNG0SZ9yFP6ZrBrLafTqlb3OojQO3LJUP33WbKqaPWMcwO7lWUX +zi8c3ZgTopHJ7qFAbjyY1lzzsiI8Le4bpOHeICQW8owRc5E69vrOJAKHypPstLbI +FhfFcvwnQPYT/pOmnVHvPCvYd1ebjGU6NSU2t7WKY28HJ5OxYI2A25bUeo8tqxyI +yW5+1mUfr13KFj8oRtygNeX56eXVlogMT8a3d2dIhCe2H7Bo26y/d7CQuKLJHDJd +ArolQ4FCR7vY4Y8MDEZf7kYzawMUgtN+zY+vkNaOJH1AQrRqahfGlZfh8jjNp+20 +J0CT33KpuMZmYzc4ZCIwojvxuch7yPspOqsactIGEk72gtQjbz7Dk+XYtsDe3CMW +1hMwt6CaDixVBgBwAc/qOR2A24j3pSC4W/0xJmmPLQphgzpHphNULB7j7UTKvGof +KA5R2d4On3XNDgOVyvnFqSot/kGkoUeuDcL5OWYzSlvhhChZbH2UF3bkRYKtcCD9 +0m9jqNf6oDP6N8v3smWe2lBvP+Sn845dWDKXcCMu5/3EFZucJ48y7RetWIExKREa +m9T8bJUox04FB6b9HbwZ4ui3uRGKLXASUoWNjDNKD/yZkuBjcNqllEdjB+dYxzFf +BT02Vf6Dsuimrdfp5gJ0iHRc2jTbkNJtUQoj1iM= +-----END CERTIFICATE----- + +-----BEGIN CERTIFICATE----- +MIIFdzCCBF+gAwIBAgIQE+oocFv07O0MNmMJgGFDNjANBgkqhkiG9w0BAQwFADBv +MQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFk +ZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBF +eHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFow +gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK +ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD +VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjAN +BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sIs9CsVw127c0n00yt +UINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnGvDoZtF+mvX2do2NC +tnbyqTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQIjy8/hPwhxR79uQf +jtTkUcYRZ0YIUcuGFFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfbIWax1Jt4A8BQOujM +8Ny8nkz+rwWWNR9XWrf/zvk9tyy29lTdyOcSOk2uTIq3XJq0tyA9yn8iNK5+O2hm +AUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnHa4xgk97Exwzf4TKuzJM7UXiV +Z4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNVicQNwZNUMBkTrNN9 +N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5D9kCnusSTJV882sF +qV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJWBp/kjbmUZIO8yZ9 +HE0XvMnsQybQv0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ5lhCLkMaTLTwJUdZ ++gQek9QmRkpQgbLevni3/GcV4clXhB4PY9bpYrrWX1Uu6lzGKAgEJTm4Diup8kyX +HAc/DVL17e8vgg8CAwEAAaOB9DCB8TAfBgNVHSMEGDAWgBStvZh6NLQm9/rEJlTv +A73gJMtUGjAdBgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/ +BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAGBgRVHSAAMEQGA1Ud +HwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4 +dGVybmFsQ0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0 +dHA6Ly9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggEBAJNl9jeD +lQ9ew4IcH9Z35zyKwKoJ8OkLJvHgwmp1ocd5yblSYMgpEg7wrQPWCcR23+WmgZWn +RtqCV6mVksW2jwMibDN3wXsyF24HzloUQToFJBv2FAY7qCUkDrvMKnXduXBBP3zQ +YzYhBx9G/2CkkeFnvN4ffhkUyWNnkepnB2u0j4vAbkN9w6GAbLIevFOFfdyQoaS8 +Le9Gclc1Bb+7RrtubTeZtv8jkpHGbkD4jylW6l/VXxRTrPBPYer3IsynVgviuDQf +Jtl7GQVoP7o81DgGotPmjw7jtHFtQELFhLRAlSv0ZaBIefYdgWOWnU914Ph85I6p +0fKtirOMxyHNwu8= +-----END CERTIFICATE----- + diff --git a/doc/nginx/ssl/screenshots.debian.net.key b/doc/nginx/ssl/screenshots.debian.net.key new file mode 100644 index 0000000..f1476b2 --- /dev/null +++ b/doc/nginx/ssl/screenshots.debian.net.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC0QybbIT5MMZgm +DONX2hY/oezY5pz9p3CfcQkcI4y5GcWRtTKDn46y+gmcQA9wHZTHKMT7tEsGAx7/ +55KaG2TtNqoZnhmyRYG7MDIgbztbdYA0/RwlVp/iVmqsc5Wsq7/ZmU/aIB2WDH6V +2cWJgJoJ0LQMj/nCBRqS4n3+YZxSr0fTrmBROHjw6pIp7AouVJ0NVeG8lnkhYXlq +BpK+qmCyhj54UpvXVAYeoiS5Qbld8kpQKZYvUdOnJyY2xUIaeGbIrQFRS6QAkSgi +7B+ZkJkt06mGKwB6hLH6M2kLUlKANIIEYVuMEYk2jYQL+pIdBDRlHpp5r3H6F11Z +PctYP+INAgMBAAECggEAdU+GR/EYc8mKtKiKgy/AbuTYGEfsPv7qwjhzr0ZLXGKz +OqHrH9GEsmEaQ/9EjLgTjJCxsQSiFmWNlQiFVZkiU2XRyR4kpumpBcLVvFnnDRwo +tVNLL9lx74BBp70I2PhkwB2P4+omlvHGp4qzjUqN9HlH0y0XYvajVpfjWtr3Oq8S +8WlIE25fi0l8NGeMZg/pvX9I42+Os46kH/Cpmw+wZY2wptTosMe2IUFwTkMUyEuT +I3oJnz3VQ24d7Q01rQdllkRpg68HBtv99k7fIPs2pSwhiBXpM39jneeFfdY7GdKB +spyAipfmOkw8COuhXNbaewl+GBAkugNT9Bbgc+XmwQKBgQDnj5GNEJv9RgXQasYY +5opNCZhlPsfOVlyhqYc/niatnMRK6L6PRgDswbfNixa3bbymMCkjgTip7U0XsbWc +8ueq+b3CnutrM5p8R9LceStDdU4oB+Tt4egqH1VkezwqD9s9OgbPYnCRTjJ1JDXH +HtjY87XhSDABSoue3R+XVAb+WQKBgQDHSZLJTuf5htltbShc1TEP11ER01Bjlid6 +bIs5XdnDsShl8DsPqrAnaiWrnHJegp3YYAcXi3fRIsO1Nbow/uk6fu9wNBt3fWPu +3T4Vf2MLUDtrsQJGQYB7JW79dbzo02Cz1tA4+b1LZil9JkRjmwub33G4Ww5+zWOi ++TzlW2wS1QKBgQDThDkX+gwDFmtJLb82D6BVLmaeVPJ+cDS9FvYMDpKWE5TaOC+Z +AADoQyt5/YsKkpq301ZAsFDqJ3E8K4ARlXA4pVfI5xF0IvcCfzkFW0lBnW1+83cS +NEC1+VkvJ8KVSVaiXtbJqMnacOt2RVU6Rdsekb+ZwS7Yfxd6TdIFkSOyQQKBgANc +MTZltzGU3Xuj2IdgLNiYh8xmJLfZI0dEJ0DLXU2YYhb96vEDrr6rYoE3PRJs315z +mAsElfuXu3cFteL3mVUcKMtahZAJNDMl1dMk97WMH8RcEq6+kf0Bj5KEdq/ySHIf +0Bj11QQ9b7uldoe7aIGzTcaO+nqW2fQ4gZdYaEUVAoGBAK5SPXvZPTPeloTrTT6T +ialF4hH8+8oibHqIac91tKFjHvP2eyJKreJ5DnLa/qGki8WCcc5BWvZtGwlc+2JV +0o9rqurSIsztr+nbXye1rdwG82pTdud50m0YM0VtXOEJ16l+d+hd9muB0ZaHp3t/ +L3FxwwYVzwm+5QfHADevnvMN +-----END PRIVATE KEY----- diff --git a/doc/nginx/uwsgi_params b/doc/nginx/uwsgi_params new file mode 100644 index 0000000..09c732c --- /dev/null +++ b/doc/nginx/uwsgi_params @@ -0,0 +1,17 @@ + +uwsgi_param QUERY_STRING $query_string; +uwsgi_param REQUEST_METHOD $request_method; +uwsgi_param CONTENT_TYPE $content_type; +uwsgi_param CONTENT_LENGTH $content_length; + +uwsgi_param REQUEST_URI $request_uri; +uwsgi_param PATH_INFO $document_uri; +uwsgi_param DOCUMENT_ROOT $document_root; +uwsgi_param SERVER_PROTOCOL $server_protocol; +uwsgi_param REQUEST_SCHEME $scheme; +uwsgi_param HTTPS $https if_not_empty; + +uwsgi_param REMOTE_ADDR $remote_addr; +uwsgi_param REMOTE_PORT $remote_port; +uwsgi_param SERVER_PORT $server_port; +uwsgi_param SERVER_NAME $server_name; diff --git a/doc/nginx/win-utf b/doc/nginx/win-utf new file mode 100644 index 0000000..774fd9f --- /dev/null +++ b/doc/nginx/win-utf @@ -0,0 +1,125 @@ +# This map is not a full windows-1251 <> utf8 map: it does not +# contain Serbian and Macedonian letters. If you need a full map, +# use contrib/unicode2nginx/win-utf map instead. + +charset_map windows-1251 utf-8 { + + 82 E2809A; # single low-9 quotation mark + + 84 E2809E; # double low-9 quotation mark + 85 E280A6; # ellipsis + 86 E280A0; # dagger + 87 E280A1; # double dagger + 88 E282AC; # euro + 89 E280B0; # per mille + + 91 E28098; # left single quotation mark + 92 E28099; # right single quotation mark + 93 E2809C; # left double quotation mark + 94 E2809D; # right double quotation mark + 95 E280A2; # bullet + 96 E28093; # en dash + 97 E28094; # em dash + + 99 E284A2; # trade mark sign + + A0 C2A0; #   + A1 D18E; # capital Byelorussian short U + A2 D19E; # small Byelorussian short u + + A4 C2A4; # currency sign + A5 D290; # capital Ukrainian soft G + A6 C2A6; # borken bar + A7 C2A7; # section sign + A8 D081; # capital YO + A9 C2A9; # (C) + AA D084; # capital Ukrainian YE + AB C2AB; # left-pointing double angle quotation mark + AC C2AC; # not sign + AD C2AD; # soft hypen + AE C2AE; # (R) + AF D087; # capital Ukrainian YI + + B0 C2B0; # ° + B1 C2B1; # plus-minus sign + B2 D086; # capital Ukrainian I + B3 D196; # small Ukrainian i + B4 D291; # small Ukrainian soft g + B5 C2B5; # micro sign + B6 C2B6; # pilcrow sign + B7 C2B7; # · + B8 D191; # small yo + B9 E28496; # numero sign + BA D194; # small Ukrainian ye + BB C2BB; # right-pointing double angle quotation mark + + BF D197; # small Ukrainian yi + + C0 D090; # capital A + C1 D091; # capital B + C2 D092; # capital V + C3 D093; # capital G + C4 D094; # capital D + C5 D095; # capital YE + C6 D096; # capital ZH + C7 D097; # capital Z + C8 D098; # capital I + C9 D099; # capital J + CA D09A; # capital K + CB D09B; # capital L + CC D09C; # capital M + CD D09D; # capital N + CE D09E; # capital O + CF D09F; # capital P + + D0 D0A0; # capital R + D1 D0A1; # capital S + D2 D0A2; # capital T + D3 D0A3; # capital U + D4 D0A4; # capital F + D5 D0A5; # capital KH + D6 D0A6; # capital TS + D7 D0A7; # capital CH + D8 D0A8; # capital SH + D9 D0A9; # capital SHCH + DA D0AA; # capital hard sign + DB D0AB; # capital Y + DC D0AC; # capital soft sign + DD D0AD; # capital E + DE D0AE; # capital YU + DF D0AF; # capital YA + + E0 D0B0; # small a + E1 D0B1; # small b + E2 D0B2; # small v + E3 D0B3; # small g + E4 D0B4; # small d + E5 D0B5; # small ye + E6 D0B6; # small zh + E7 D0B7; # small z + E8 D0B8; # small i + E9 D0B9; # small j + EA D0BA; # small k + EB D0BB; # small l + EC D0BC; # small m + ED D0BD; # small n + EE D0BE; # small o + EF D0BF; # small p + + F0 D180; # small r + F1 D181; # small s + F2 D182; # small t + F3 D183; # small u + F4 D184; # small f + F5 D185; # small kh + F6 D186; # small ts + F7 D187; # small ch + F8 D188; # small sh + F9 D189; # small shch + FA D18A; # small hard sign + FB D18B; # small y + FC D18C; # small soft sign + FD D18D; # small e + FE D18E; # small yu + FF D18F; # small ya +}