view nginx.conf @ 26:d3b72a8bfbe9 default tip

Add rate limiting, change moveLogs.sh to only operate on non-empty files
author Violet7
date Sat, 01 Nov 2025 22:12:56 -0700
parents bbafc54bbd26
children
line wrap: on
line source

worker_processes  4;

events {
	worker_connections  4096;
}

http {
	include mime.types;
	default_type application/octet-stream;
	sendfile on;
	keepalive_timeout 65;
	resolver 8.8.8.8 1.1.1.1 valid=600s;
	resolver_timeout 10s;

  limit_req_zone $binary_remote_addr zone=perip:10m rate=10r/s;
  limit_req zone=perip burst=20 nodelay;
  limit_req_status 429;
  limit_req_log_level warn;



  log_format full '$remote_addr - $remote_user [$time_local] '
              '"$request" $status $body_bytes_sent '
              '"$http_referer" "$http_user_agent" '
              'X-Forwarded-For: $http_x_forwarded_for';

  # Enable access log globally (all requests)
  access_log /Users/administrator/hghosting/logs/nginx_access.log full;
  error_log /Users/administrator/hghosting/logs/nginx_error.log;

	server {
		listen 80;
		include nginx.default.conf;
		include config/nginx.custom.*.conf;
		include config/nginx.conf;
	}
	include config/nginx.ssl.*.conf;
}