567f60dd7daa76afc64efb0729ac24012c5f7fac
[nonrtric.git] / test / prodstub / app / nginx.conf
1 user www-data;
2 worker_processes auto;
3 pid /run/nginx.pid;
4 include /etc/nginx/modules-enabled/*.conf;
5
6 events {
7     worker_connections 768;
8 }
9
10 http {
11
12     ##
13     # Basic Settings
14     ##
15
16     sendfile on;
17     tcp_nopush on;
18     tcp_nodelay on;
19     keepalive_timeout 65;
20     types_hash_max_size 2048;
21
22     include /etc/nginx/mime.types;
23     default_type application/octet-stream;
24
25     server { # simple reverse-proxy
26         listen      8092;
27         listen      [::]:8092;
28         listen      8093 ssl;
29         listen      [::]:8093 ssl;
30         server_name  localhost;
31         ssl_certificate     /usr/src/app/cert/cert.crt;
32         ssl_certificate_key /usr/src/app/cert/key.crt;
33         ssl_password_file   /usr/src/app/cert/pass;
34
35         # serve dynamic requests
36         location / {
37         proxy_pass      http://localhost:2222;
38         }
39     }
40     ##
41     # SSL Settings
42     ##
43
44     ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
45     ssl_prefer_server_ciphers on;
46
47     ##
48     # Logging Settings
49     ##
50
51     access_log /var/log/nginx/access.log;
52     error_log /var/log/nginx/error.log;
53 }
54