test/cr/app/nginx.conf

   1 user www-data;
   2 worker_processes auto;
   3 pid /run/nginx.pid;
   4 include /etc/nginx/modules-enabled/*.conf;
   5
   6 events {
   7     worker_connections 768;
   8 }
   9
  10 http {
  11
  12     ##
  13     # Basic Settings
  14     ##
  15
  16     sendfile on;
  17     tcp_nopush on;
  18     tcp_nodelay on;
  19     keepalive_timeout 65;
  20     types_hash_max_size 2048;
  21
  22     include /etc/nginx/mime.types;
  23     default_type application/octet-stream;
  24
  25     server { # simple reverse-proxy
  26         listen      8090;
  27         listen      [::]:8090;
  28         listen      8091 ssl;
  29         listen      [::]:8091 ssl;
  30         server_name  localhost;
  31         ssl_certificate     /usr/src/app/cert/cert.crt;
  32         ssl_certificate_key /usr/src/app/cert/key.crt;
  33         ssl_password_file   /usr/src/app/cert/pass;
  34
  35         # serve dynamic requests
  36         location / {
  37            proxy_set_header   Host                 $host;
  38            proxy_set_header   X-Real-IP            $remote_addr;
  39            proxy_set_header   X-Forwarded-For      $proxy_add_x_forwarded_for;
  40            proxy_pass      http://localhost:2222;
  41
  42            client_max_body_size 0;
  43         }
  44
  45     }
  46     ##
  47     # SSL Settings
  48     ##
  49
  50     ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
  51     ssl_prefer_server_ciphers on;
  52
  53     ##
  54     # Logging Settings
  55     ##
  56
  57     access_log /var/log/nginx/access.log;
  58     error_log /var/log/nginx/error.log;
  59
  60 }