blob: ba40d59aee8fba8e1c605cd590e1c17d3c920f35 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
default_type application/octet-stream;
log_format main
'$remote_addr - $remote_user [$time_local] '
'"$request" $status $bytes_sent '
'"$http_referer" "$http_user_agent" '
'"$gzip_ratio"';
client_header_timeout 10m;
client_body_timeout 10m;
send_timeout 10m;
connection_pool_size 256;
client_header_buffer_size 1k;
large_client_header_buffers 4 2k;
request_pool_size 4k;
gzip on;
gzip_min_length 1100;
gzip_buffers 4 8k;
gzip_types text/plain;
output_buffers 1 32k;
postpone_output 1460;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 75 20;
ignore_invalid_headers on;
server {
listen *:80;
listen [::]:80;
server_name dirty-haskell.org www.dirty-haskell.org;
root /srv/www/dirty-haskell.org;
}
server {
listen *:443 ssl;
listen [::]:443 ssl;
server_name dirty-haskell.org;
ssl_certificate /etc/nginx/ssl/dirty-haskell.org/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/dirty-haskell.org/privkey.pem;
location /.well-known/acme/ {
proxy_pass http://192.168.0.2:80/.well-known/acme/;
}
root /srv/www/dirty-haskell.org;
}
server {
listen *:443 ssl;
listen [::]:443 ssl;
server_name www.dirty-haskell.org;
ssl_certificate /etc/nginx/ssl/www.dirty-haskell.org/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/www.dirty-haskell.org/privkey.pem;
location /.well-known/acme/ {
proxy_pass http://192.168.0.2:80/.well-known/acme/;
}
root /srv/www/dirty-haskell.org;
}
|
