machine_setup/ansible/roles/jail_bastion/files/nginx.conf

55 lines
1.1 KiB
Nginx Configuration File
Raw Normal View History

2024-07-02 02:01:07 +00:00
worker_processes auto;
user www www;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
types {
text/plain log;
}
sendfile on;
tcp_nopush on;
tcp_nodelay on;
gzip on;
include conf.d/headers.include;
upstream inner {
server 10.215.2.2:8081;
keepalive 4;
}
server {
2024-07-04 04:45:54 +00:00
listen 443 quic reuseport;
listen [::]:443 quic reuseport;
2024-07-02 02:01:07 +00:00
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name stuff.fizz.buzz;
include conf.d/tls_settings.include;
# RSA
2024-10-05 01:22:55 +00:00
ssl_certificate /letsencrypt/live/stuff.fizz.buzz/fullchain.pem;
ssl_certificate_key /letsencrypt/live/stuff.fizz.buzz/privkey.pem;
2024-07-02 02:01:07 +00:00
# Nginx by default only allows file uploads up to 1M in size
client_max_body_size 50M;
location / {
auth_basic "Stuff";
auth_basic_user_file conf.d/htpasswd;
proxy_pass http://inner;
include conf.d/proxy.include;
}
}
}