Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- upstream foo {
- keepalive 50;
- server 127.0.0.1:5000 max_fails=10 fail_timeout=30s;
- }
- server {
- listen 80;
- listen [::]:80;
- server_name www.example.com;
- return 301 https://$host$request_uri;
- }
- server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
- server_name www.example.com;
- access_log /var/log/nginx/example_access.log;
- error_log /var/log/nginx/example_error.log;
- ssl_certificate /etc/ssl/cloudflare/example_cert.pem;
- ssl_certificate_key /etc/ssl/cloudflare/example_key.pem;
- include /etc/nginx/ssl.conf;
- add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
- location / {
- proxy_redirect off;
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- client_max_body_size 0;
- client_body_buffer_size 128k;
- proxy_connect_timeout 60;
- proxy_send_timeout 60;
- proxy_read_timeout 60;
- proxy_buffers 32 4k;
- proxy_pass http://foo;
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement