freifunk/ansible-config
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

nginx Basis-Setup

Browse source
This commit is contained in:
baldo 2015-11-14 18:48:41 +01:00
commit 3c917ce4b2
8 changed files with 117 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

18
roles/web-server/base/files/etc/nginx/conf.d/gzip.conf Normal file
View file

@ -0,0 +1,18 @@
#
# ACTHUNG:
#
# Wird via Ansible konfiguriert. Bitte nicht manuell ändern!
#
# Gzip settings
gzip on;
gzip_disable "msie6";
gzip_static on;
gzip_vary on;
gzip_proxied any;
gzip_comp_level 9;
gzip_buffers 256 8k;
gzip_http_version 1.1;
gzip_min_length 0;
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

11
roles/web-server/base/files/etc/nginx/conf.d/logging.conf Normal file
View file

@ -0,0 +1,11 @@
#
# ACTHUNG:
#
# Wird via Ansible konfiguriert. Bitte nicht manuell ändern!
#
##
# Logging Settings
##
include /etc/nginx/include/no_logging.conf;

9
roles/web-server/base/files/etc/nginx/conf.d/optimizations.conf Normal file
View file

@ -0,0 +1,9 @@
#
# ACTHUNG:
#
# Wird via Ansible konfiguriert. Bitte nicht manuell ändern!
#
# Server optimizations
server_names_hash_bucket_size 128;

12
roles/web-server/base/files/etc/nginx/conf.d/security.conf Normal file
View file

@ -0,0 +1,12 @@
#
# ACTHUNG:
#
# Wird via Ansible konfiguriert. Bitte nicht manuell ändern!
#
# Global security settings for nginx
ignore_invalid_headers on;
sendfile on;
server_name_in_redirect off;
server_tokens off;

2
roles/web-server/base/files/etc/nginx/include/ssl.rewrite
View file

@ -5,4 +5,4 @@
#
# Generischer Rewrite von HTTP nach HTTPS
rewrite ^ https://$server_name$request_uri? permanent;
rewrite ^ https://$server_name$request_uri? permanent;

20
roles/web-server/base/files/etc/nginx/nginx.conf
View file

@ -38,26 +38,6 @@ http {
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
##
# Logging Settings
##
include /etc/nginx/include/no_logging.conf;
##
# Gzip Settings
##
gzip on;
gzip_disable "msie6";
# gzip_vary on;
# gzip_proxied any;
# gzip_comp_level 6;
# gzip_buffers 16 8k;
# gzip_http_version 1.1;
# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
##
# Virtual Host Configs
##