196 lines
5.8 KiB
Text
196 lines
5.8 KiB
Text
##
|
|
# You should look at the following URL's in order to grasp a solid understanding
|
|
# of Nginx configuration files in order to fully unleash the power of Nginx.
|
|
# http://wiki.nginx.org/Pitfalls
|
|
# http://wiki.nginx.org/QuickStart
|
|
# http://wiki.nginx.org/Configuration
|
|
#
|
|
# Generally, you will want to move this file somewhere, and start with a clean
|
|
# file but keep this around for reference. Or just disable in sites-enabled.
|
|
#
|
|
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
|
|
##
|
|
|
|
#proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=assets:768m use_temp_path=off;
|
|
|
|
#add_header X-Cache-Status $upstream_cache_status;
|
|
#add_header X-Runtime 42;
|
|
more_clear_headers 'X-Runtime';
|
|
more_clear_headers 'X-Powered-By';
|
|
more_clear_headers 'Server';
|
|
server_tokens off;
|
|
|
|
proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=my_cache:10m max_size=10g inactive=60m use_temp_path=off;
|
|
|
|
log_format proxy '[$time_local] Cache: $upstream_cache_status $upstream_addr $upstream_response_time $status $bytes_sent $proxy_add_x_forwarded_for $request_uri "$http_referer" "$http_user_agent"';
|
|
|
|
#passenger_show_version_in_header off;
|
|
|
|
#log_format proxy '[$time_local] Cache: $upstream_cache_status $upstream_addr $upstream_response_time $status $bytes_sent $proxy_add_x_forwarded_for $request_uri "$http_referer" "$http_user_agent"';
|
|
|
|
# Default server configuration
|
|
#
|
|
#passenger_log_level 5;
|
|
|
|
# Performance
|
|
passenger_max_pool_size 8;
|
|
passenger_max_request_queue_size 200;
|
|
|
|
#limit_req_zone $binary_remote_addr zone=one:10m rate=5r/s;
|
|
|
|
# Frontend caching and static asset delivery
|
|
server {
|
|
listen 85.25.83.22:80 default_server;
|
|
listen 85.25.83.22:443 ssl;
|
|
ssl_certificate ssl/screenshots.debian.net.crt;
|
|
ssl_certificate_key ssl/screenshots.debian.net.key;
|
|
|
|
root /home/debshots/debshots/public;
|
|
server_name _;
|
|
access_log /var/log/nginx/cache-access.log proxy;
|
|
|
|
add_header X-Cache-Status $upstream_cache_status;
|
|
|
|
# Pass on the actual HTTP_HOST ("Host:" header) so that Rails can build proper absolute URLs
|
|
#proxy_set_header Host $http_host;
|
|
proxy_set_header Host $host;
|
|
#proxy_cache_key $scheme$proxy_host$request_uri;
|
|
#
|
|
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
|
|
gzip_proxied any;
|
|
|
|
location / {
|
|
try_files /maintenance.html @backend;
|
|
add_header X-Coffee main;
|
|
}
|
|
|
|
location /json/ {
|
|
try_files /maintenance.html @backend;
|
|
add_header X-Coffee json;
|
|
}
|
|
|
|
location /favicon.ico {
|
|
# try_files /maintenance.html @backend;
|
|
alias /home/debshots/debshots/public/favicon.ico;
|
|
}
|
|
|
|
location @backend {
|
|
proxy_cache my_cache;
|
|
proxy_pass http://127.0.0.1:8888;
|
|
|
|
# Avoid cache stampede - rather update once and deliver stale content
|
|
proxy_cache_lock on;
|
|
proxy_cache_use_stale updating;
|
|
}
|
|
|
|
location /assets/ {
|
|
alias /home/debshots/debshots/public/assets/;
|
|
expires 1h;
|
|
add_header X-Coffee assets;
|
|
}
|
|
location /logo/ {
|
|
alias /home/debshots/debshots/public/logo/;
|
|
expires 1h;
|
|
add_header X-Coffee logo;
|
|
}
|
|
location /screenshots/ {
|
|
alias /home/debshots/debshots/public/screenshots/;
|
|
expires max;
|
|
add_header X-Coffee screenshots;
|
|
}
|
|
location /images/ {
|
|
alias /home/debshots/debshots/public/images/;
|
|
expires 1h;
|
|
add_header X-Coffee images;
|
|
}
|
|
}
|
|
|
|
# Backend rails application
|
|
server {
|
|
#listen 85.25.83.22:80 default_server;
|
|
#listen 85.25.83.22:443 ssl;
|
|
#ssl_certificate ssl/screenshots.debian.net.crt;
|
|
#ssl_certificate_key ssl/screenshots.debian.net.key;
|
|
listen 127.0.0.1:8888;
|
|
|
|
root /home/debshots/debshots/public;
|
|
|
|
server_name _;
|
|
access_log /var/log/nginx/rails-access.log;
|
|
|
|
passenger_enabled on;
|
|
passenger_ruby /home/debshots/.rbenv/versions/2.3.1/bin/ruby;
|
|
#expires 1d;
|
|
#limit_req zone=one burst=5;
|
|
|
|
#location / {
|
|
# try_files /maintenance.html @passenger;
|
|
#}
|
|
#
|
|
# location @passenger {
|
|
# #passenger_enabled on;
|
|
# #rails_env production;
|
|
# passenger_enabled on;
|
|
# passenger_ruby /home/debshots/.rbenv/versions/2.3.1/bin/ruby;
|
|
# #limit_req zone=one burst=5;
|
|
# add_header X-Coffee app;
|
|
## }
|
|
|
|
|
|
# Send thumbnails using X-Sendfile / X-Accel-Redirect
|
|
# The correct thumbnail is computed by the Rails application so it cannot be served directly.
|
|
location /thumbnail/ {
|
|
expires 1h;
|
|
add_header X-Coffee thumbnail;
|
|
|
|
passenger_set_header X-Sendfile-Type "X-Accel-Redirect";
|
|
passenger_env_var HTTP_X_ACCEL_MAPPING /home/debshots/debshots/public/=/__send_file_accel/;
|
|
passenger_pass_header X-Accel-Redirect;
|
|
}
|
|
|
|
# Send public assets using X-Sendfile / X-Accel-Redirect (e.g. public/images/dummy/...)
|
|
location /public/ {
|
|
expires 1h;
|
|
add_header X-Coffee public;
|
|
|
|
passenger_set_header X-Sendfile-Type "X-Accel-Redirect";
|
|
passenger_env_var HTTP_X_ACCEL_MAPPING /home/debshots/debshots/public/=/__send_file_accel/;
|
|
passenger_pass_header X-Accel-Redirect;
|
|
}
|
|
|
|
location /__send_file_accel/ {
|
|
internal;
|
|
alias /home/debshots/debshots/public/;
|
|
add_header X-Coffee accel;
|
|
expires 1d;
|
|
more_clear_headers 'Set-Cookie';
|
|
}
|
|
|
|
location /secretstatus {
|
|
stub_status;
|
|
access_log off;
|
|
allow all;
|
|
add_header X-Coffee status;
|
|
#deny all;
|
|
}
|
|
}
|
|
|
|
|
|
# Virtual Host configuration for example.com
|
|
#
|
|
# You can move that to a different file under sites-available/ and symlink that
|
|
# to sites-enabled/ to enable it.
|
|
#
|
|
#server {
|
|
# listen 80;
|
|
# listen [::]:80;
|
|
#
|
|
# server_name example.com;
|
|
#
|
|
# root /var/www/example.com;
|
|
# index index.html;
|
|
#
|
|
# location / {
|
|
# try_files $uri $uri/ =404;
|
|
# }
|
|
#}
|