Mercurial Hosting > hghosting

annotate nginx.conf @ 26:d3b72a8bfbe9 default tip

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Add rate limiting, change moveLogs.sh to only operate on non-empty files
author Violet7
date Sat, 01 Nov 2025 22:12:56 -0700
parents bbafc54bbd26
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
0
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
1 worker_processes 4;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
2
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
3 events {
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
4 worker_connections 4096;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
5 }
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
6
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
7 http {
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
8 include mime.types;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
9 default_type application/octet-stream;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
10 sendfile on;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
11 keepalive_timeout 65;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
12 resolver 8.8.8.8 1.1.1.1 valid=600s;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
13 resolver_timeout 10s;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
14
26
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
15 limit_req_zone $binary_remote_addr zone=perip:10m rate=10r/s;
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
16 limit_req zone=perip burst=20 nodelay;
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
17 limit_req_status 429;
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
18 limit_req_log_level warn;
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
19
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
20
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
21
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
22 log_format full '$remote_addr - $remote_user [$time_local] '
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
23 '"$request" $status $body_bytes_sent '
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
24 '"$http_referer" "$http_user_agent" '
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
25 'X-Forwarded-For: $http_x_forwarded_for';
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
26
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
27 # Enable access log globally (all requests)
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
28 access_log /Users/administrator/hghosting/logs/nginx_access.log full;
d3b72a8bfbe9 Add rate limiting, change moveLogs.sh to only operate on non-empty files
Violet7
parents: 11
diff changeset
29 error_log /Users/administrator/hghosting/logs/nginx_error.log;
0
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
30
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
31 server {
11
bbafc54bbd26 fix ssl renew
Vadim Filimonov <fffilimonov@yandex.ru>
parents: 0
diff changeset
32 listen 80;
0
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
33 include nginx.default.conf;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
34 include config/nginx.custom.*.conf;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
35 include config/nginx.conf;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
36 }
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
37 include config/nginx.ssl.*.conf;
Vadim Filimonov <fffilimonov@yandex.ru>
parents:
diff changeset
38 }