-
Notifications
You must be signed in to change notification settings - Fork 0
/
nginx.conf
158 lines (141 loc) · 5.43 KB
/
nginx.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;
events {
worker_connections 1024;
multi_accept on; #testing purpose
}
stream {
log_format basic '$remote_addr [$time_local] '
'$protocol $status $bytes_sent $bytes_received '
'$session_time';
access_log /var/log/nginx/access.log basic;
error_log /var/log/nginx/error.log debug;
upstream dn-gnome-56956{
least_conn;
server 10.0.3.224:56956;
#server 10.0.15.180:56956;
#server 192.168.100.3;
#server 192.168.100.4;
}
upstream dn-gnome-24001{
least_conn;
server 10.0.3.224:24001;
#server 10.0.15.180:24001;
#server 10.0.3.233:24001;
#server 10.0.7.141:24001;
#server 192.168.100.3;
#server 192.168.100.4;
}
upstream dn-gnome-25001{
least_conn;
server 10.0.3.224:25001;
#server 10.0.15.180:25001;
#server 192.168.100.3;
#server 192.168.100.4;
}
server {
listen 24001;
#proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header Host $host;
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass dn-gnome-24001;
}
server {
listen 25001;
#proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header Host $host;
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass dn-gnome-25001;
}
server {
listen 56956;
#proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header Host $host;
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass dn-gnome-56956;
}
#ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
#ssl_prefer_server_ciphers on;
}
http {
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for" "$request_body"';
access_log /var/log/nginx/access.log main;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 4096;
include /etc/nginx/mime.types;
default_type application/octet-stream;
# Load modular configuration files from the /etc/nginx/conf.d directory.
# See http://nginx.org/en/docs/ngx_core_module.html#include
# for more information.
include /etc/nginx/conf.d/*.conf;
# Upsteam server gnome
upstream dn-gnome-81{
least_conn;
server 10.0.3.224:81;
#server 10.0.15.180:81;
#server 10.0.3.233:81;
#server 10.0.7.141:81;
#server 192.168.100.3;
#server 192.168.100.4;
}
# Upsteam server gnome
upstream dn-updater{
least_conn;
server 10.0.4.225:80;
#server 10.0.15.180:81;
#server 10.0.3.233:81;
#server 10.0.7.141:81;
#server 192.168.100.3;
#server 192.168.100.4;
}
limit_req_zone $binary_remote_addr zone=one:10m rate=1000r/m;
server {
listen 81;
listen [::]:81;
server_name gnome-hub.com www.gnome-hub.com obt.gnome-hub.com;
root /usr/share/nginx/html;
# Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf;
#ssl_certificate /etc/letsencrypt/live/gnome-hub.com/fullchain.pem; # managed by Certbot
#ssl_certificate_key /etc/letsencrypt/live/gnome-hub.com/privkey.pem; # managed by Certbot
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
#error_page 497 301 =307 https://$host:$server_port$request_uri;
location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host:$server_port;
proxy_set_header X-Forwarded-Ssl on;
proxy_redirect off;
limit_except GET HEAD POST { deny all; }
limit_req zone=one burst=10 nodelay;
deny 31.220.3.140;
# proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://dn-gnome-81;
}
location /dev10release3/ {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host:$server_port;
proxy_set_header X-Forwarded-Ssl on;
proxy_redirect off;
# proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#rewrite ^/update(/.*)$ $1 break;
proxy_pass http://dn-updater;
}
error_page 404 /404.html;
location = /404.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}