mirror of
				https://github.com/telekom-security/tpotce.git
				synced 2025-10-26 10:14:45 +00:00 
			
		
		
		
	
		
			
	
	
		
			77 lines
		
	
	
	
		
			1.6 KiB
		
	
	
	
		
			Nginx Configuration File
		
	
	
	
	
	
		
		
			
		
	
	
			77 lines
		
	
	
	
		
			1.6 KiB
		
	
	
	
		
			Nginx Configuration File
		
	
	
	
	
	
|   | user nginx; | ||
|  | worker_processes auto; | ||
|  | pid /run/nginx.pid; | ||
|  | load_module /usr/lib/nginx/modules/ngx_http_headers_more_filter_module.so; | ||
|  | 
 | ||
|  | events { | ||
|  | 	worker_connections 768; | ||
|  | 	# multi_accept on;
 | ||
|  | } | ||
|  | 
 | ||
|  | http { | ||
|  | 
 | ||
|  | 	##
 | ||
|  | 	# Basic Settings
 | ||
|  | 	##
 | ||
|  | 
 | ||
|  | 	sendfile on; | ||
|  | 	tcp_nopush on; | ||
|  | 	tcp_nodelay on; | ||
|  | 	keepalive_timeout 65; | ||
|  | 	types_hash_max_size 2048; | ||
|  | 	# server_tokens off;
 | ||
|  | 
 | ||
|  | 	# server_names_hash_bucket_size 64;
 | ||
|  | 	# server_name_in_redirect off;
 | ||
|  | 
 | ||
|  | 	include /etc/nginx/mime.types; | ||
|  | 	default_type application/octet-stream; | ||
|  | 
 | ||
|  | 	##
 | ||
|  | 	# SSL Settings
 | ||
|  | 	##
 | ||
|  | 
 | ||
|  | 	#ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
 | ||
|  | 	ssl_protocols TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
 | ||
|  | 	ssl_prefer_server_ciphers on; | ||
|  | 
 | ||
|  | 	##
 | ||
|  | 	# Logging Settings
 | ||
|  | 	##
 | ||
|  | 
 | ||
|  |         log_format le_json '{ "timestamp": "$time_iso8601", ' | ||
|  |  	'"src_ip": "$remote_addr", ' | ||
|  |  	'"remote_user": "$remote_user", ' | ||
|  |  	'"body_bytes_sent": "$body_bytes_sent", ' | ||
|  |  	'"request_time": "$request_time", ' | ||
|  |  	'"status": "$status", ' | ||
|  |  	'"request": "$request", ' | ||
|  |  	'"request_method": "$request_method", ' | ||
|  |  	'"http_referrer": "$http_referer", ' | ||
|  |  	'"http_user_agent": "$http_user_agent" }'; | ||
|  |   | ||
|  |  	access_log /var/log/nginx/access.log le_json; | ||
|  | 	error_log /var/log/nginx/error.log; | ||
|  | 
 | ||
|  | 	##
 | ||
|  | 	# Gzip Settings
 | ||
|  | 	##
 | ||
|  | 
 | ||
|  | 	gzip on; | ||
|  | 	gzip_disable "msie6"; | ||
|  | 
 | ||
|  | 	# gzip_vary on;
 | ||
|  | 	# gzip_proxied any;
 | ||
|  | 	# gzip_comp_level 6;
 | ||
|  | 	# gzip_buffers 16 8k;
 | ||
|  | 	# gzip_http_version 1.1;
 | ||
|  | 	# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
 | ||
|  | 
 | ||
|  | 	##
 | ||
|  | 	# Virtual Host Configs
 | ||
|  | 	##
 | ||
|  | 
 | ||
|  | 	include /etc/nginx/conf.d/*.conf; | ||
|  | 	include /etc/nginx/sites-enabled/*; | ||
|  | } |