1*4882a593Smuzhiyunuser www; 2*4882a593Smuzhiyunworker_processes 1; 3*4882a593Smuzhiyunpid /run/nginx/nginx.pid; 4*4882a593Smuzhiyuninclude /etc/nginx/modules-enabled/*.conf; 5*4882a593Smuzhiyun 6*4882a593Smuzhiyunevents { 7*4882a593Smuzhiyun worker_connections 768; 8*4882a593Smuzhiyun # multi_accept on; 9*4882a593Smuzhiyun} 10*4882a593Smuzhiyun 11*4882a593Smuzhiyunhttp { 12*4882a593Smuzhiyun # Basic Settings 13*4882a593Smuzhiyun sendfile on; 14*4882a593Smuzhiyun tcp_nopush on; 15*4882a593Smuzhiyun tcp_nodelay on; 16*4882a593Smuzhiyun keepalive_timeout 65; 17*4882a593Smuzhiyun types_hash_max_size 2048; 18*4882a593Smuzhiyun # server_tokens off; 19*4882a593Smuzhiyun 20*4882a593Smuzhiyun # server_names_hash_bucket_size 64; 21*4882a593Smuzhiyun # server_name_in_redirect off; 22*4882a593Smuzhiyun 23*4882a593Smuzhiyun include /etc/nginx/mime.types; 24*4882a593Smuzhiyun default_type application/octet-stream; 25*4882a593Smuzhiyun 26*4882a593Smuzhiyun # SSL Settings 27*4882a593Smuzhiyun ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE 28*4882a593Smuzhiyun ssl_prefer_server_ciphers on; 29*4882a593Smuzhiyun 30*4882a593Smuzhiyun ## Logging 31*4882a593Smuzhiyun access_log /var/log/nginx/access.log; 32*4882a593Smuzhiyun error_log /var/log/nginx/error.log; 33*4882a593Smuzhiyun 34*4882a593Smuzhiyun ## Gzip settings 35*4882a593Smuzhiyun gzip on; 36*4882a593Smuzhiyun 37*4882a593Smuzhiyun gzip_vary on; 38*4882a593Smuzhiyun gzip_proxied any; 39*4882a593Smuzhiyun gzip_comp_level 6; 40*4882a593Smuzhiyun gzip_buffers 16 8k; 41*4882a593Smuzhiyun gzip_http_version 1.1; 42*4882a593Smuzhiyun gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; 43*4882a593Smuzhiyun 44*4882a593Smuzhiyun ## Virtual Host Configs 45*4882a593Smuzhiyun include /etc/nginx/conf.d/*.conf; 46*4882a593Smuzhiyun include /etc/nginx/sites-enabled/*; 47*4882a593Smuzhiyun} 48