CCCHH/ansible-infra
CCCHH/ansible-infra
Watch
3
2
Fork
You've already forked ansible-infra
 1
Code Issues 20 Pull requests 19 Wiki Activity Actions
ansible-infra/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf
jtbx 012bceeabb
All checks were successful
/ build (pull_request) Successful in 29s
Details
/ Ansible Lint (push) Successful in 2m34s
Details
/ Ansible Lint (pull_request) Successful in 2m37s
Details
public-reverse-proxy(host): Increase nginx worker fd limit 
By default the limit on file descriptors is at a 1024 hard limit and 520k hard limit.
Unsure how this affects nginx, but each client connection needs two file descriptors.
So let's try to set the limit of open files explicitly.
2026-08-28 12:11:03 +02:00

157 lines
8.1 KiB
Nginx Configuration File
Raw Blame History

# This config is based on the standard `nginx.conf` shipping with the stable
# nginx package from the NGINX mirrors as of 2023-01.
user nginx;
worker_processes auto;
worker_rlimit_nofile 2050; # should be worker_connections*2 at least
error_log /var/log/nginx/error.log notice;
pid /var/run/nginx.pid;
events {
worker_connections 1024;
}
# Listen on port 443 as a reverse proxy and use PROXY Protocol for the
# upstreams.
stream {
resolver 212.12.50.158 192.76.134.90;
map $ssl_preread_server_name $address {
hostnames;
ccchoir.de ccchoir.hosts.hamburg.ccc.de:8443;
www.ccchoir.de ccchoir.hosts.hamburg.ccc.de:8443;
cloud.hamburg.ccc.de cloud.hosts.hamburg.ccc.de:8443;
pad.hamburg.ccc.de pad.hosts.hamburg.ccc.de:8443;
pretalx.hamburg.ccc.de pretalx.hosts.hamburg.ccc.de:8443;
id.hamburg.ccc.de keycloak.hosts.hamburg.ccc.de:8443;
invite.hamburg.ccc.de keycloak.hosts.hamburg.ccc.de:8443;
keycloak-admin.hamburg.ccc.de keycloak.hosts.hamburg.ccc.de:8443;
grafana.hamburg.ccc.de grafana.hosts.hamburg.ccc.de:8443;
wiki.ccchh.net wiki.hosts.hamburg.ccc.de:8443;
wiki.hamburg.ccc.de wiki.hosts.hamburg.ccc.de:8443;
onlyoffice.hamburg.ccc.de onlyoffice.hosts.hamburg.ccc.de:8443;
hackertours.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.hackertours.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
netbox.hamburg.ccc.de netbox.hosts.hamburg.ccc.de:8443;
matrix.hamburg.ccc.de 172.31.17.150:8443;
mas.hamburg.ccc.de 172.31.17.150:8443;
element-admin.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
element.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
branding-resources.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
spaceapi.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
tickets.hamburg.ccc.de tickets.hosts.hamburg.ccc.de:8443;
sunders.hamburg.ccc.de sunders.hosts.hamburg.ccc.de:8443;
zammad.hamburg.ccc.de zammad.hosts.hamburg.ccc.de:8443;
c3cat.de public-web-static.hosts.hamburg.ccc.de:8443;
www.c3cat.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.c3cat.de public-web-static.hosts.hamburg.ccc.de:8443;
c3dog.de public-web-static.hosts.hamburg.ccc.de:8443;
www.c3dog.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.c3dog.de public-web-static.hosts.hamburg.ccc.de:8443;
git.hamburg.ccc.de 172.31.17.154:8443;
eh03.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
eh05.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
eh07.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
eh09.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
eh11.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
eh20.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
www.eh20.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
eh22.easterhegg.eu eh22-wiki.hosts.hamburg.ccc.de:8443;
easterheggxxxx.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.eh2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
easterhegg2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.easterhegg2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.eh2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
easterhegg2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.easterhegg2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.eh2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh07.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.eh07.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
easterhegg2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.easterhegg2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.eh2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh09.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.eh09.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
easterhegg2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.easterhegg2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.eh2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh11.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.eh11.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
easterhegg2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
www.easterhegg2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
eh20.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
hacker.tours public-web-static.hosts.hamburg.ccc.de:8443;
staging.hacker.tours public-web-static.hosts.hamburg.ccc.de:8443;
design.hamburg.ccc.de 172.31.17.162:8443;
hydra.hamburg.ccc.de 172.31.17.163:8443;
cfp.eh22.easterhegg.eu pretalx.hosts.hamburg.ccc.de:8443;
ntfy.hamburg.ccc.de ntfy.hosts.hamburg.ccc.de:8443;
cryptoparty-hamburg.de public-web-static.hosts.hamburg.ccc.de:8443;
cryptoparty.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.cryptoparty-hamburg.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.cryptoparty.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
spaceapi.ccc.de spaceapiccc.hosts.hamburg.ccc.de:8443;
cpu.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
lokal.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
local.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
acmedns.hamburg.ccc.de acmedns.hosts.hamburg.ccc.de:8443;
diday.org public-web-static.hosts.hamburg.ccc.de:8443;
*.staging.diday.org public-web-static.hosts.hamburg.ccc.de:8443;
docs.c3voc.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.docs.c3voc.de public-web-static.hosts.hamburg.ccc.de:8443;
infra-docs.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.infra-docs.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
didays.de public-web-static.hosts.hamburg.ccc.de:8443;
staging.didays.de public-web-static.hosts.hamburg.ccc.de:8443;
ueberwachungsfrei.eu public-web-static.hosts.hamburg.ccc.de:8443;
überwachungsfrei.eu public-web-static.hosts.hamburg.ccc.de:8443;
xn--berwachungsfrei-yvb.eu public-web-static.hosts.hamburg.ccc.de:8443;
}
server {
listen 0.0.0.0:443;
listen [::]:443;
proxy_pass $address;
ssl_preread on;
proxy_protocol on;
}
server {
listen 0.0.0.0:8448;
listen [::]:8448;
proxy_pass 172.31.17.150:8448;
ssl_preread on;
proxy_protocol on;
}
}
# Still have the default http block, so the `acme_challenge.conf` works.
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
access_log /var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
keepalive_timeout 65;
#gzip on;
include /etc/nginx/conf.d/*.conf;
}
Reference in a new issue View git blame Copy permalink