1
server {
2
    charset utf-8;
3

4
    listen 443 ssl http2 default_server;
5
    listen [::]:443 ssl http2 default_server;
6

7
    ssl_certificate /server/cert/cialo.site_bundle.crt;
8
    ssl_certificate_key /server/cert/cialo.site.key;
9

10
    root /server/data;
11

12
    index index.html index.htm index.php;
13

14
    server_name _;
15

16
    error_page 403 /403.html;
17
    location = /403.html {
18
        root   /server/error;
19
    }
20
    error_page 404 /404.html;
21
    location = /404.html {
22
        root   /server/error;
23
    }
24

25
    location ~ \.php$ {
26
        fastcgi_pass   unix:/run/php/php8.3-fpm.sock;
27
        fastcgi_index  index.php;
28
        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
29
        include        fastcgi_params;
30
    }
31

32
    location / {
33
        deny all;
34
    }
35

36
    location /img/ {
37
        autoindex on;
38
        autoindex_exact_size off;
39
        autoindex_localtime on;
40
    }
41

42
    location /html/ {
43
        autoindex on;
44
        autoindex_exact_size off;
45
        autoindex_localtime on;
46
    }
47

48
    location /file/ {
49
        autoindex on;
50
        autoindex_exact_size off;
51
        autoindex_localtime on;
52
    }
53
}
54

55
server {
56
    listen 52011 ssl http2;
57

58
    ssl_certificate /server/cert/cialo.site_bundle.crt;
59
    ssl_certificate_key /server/cert/cialo.site.key;
60

61
    proxy_buffering off;
62
    proxy_request_buffering off;
63

64
    client_max_body_size 0;
65

66
    proxy_connect_timeout 300s;
67
    proxy_send_timeout 365d;
68
    proxy_read_timeout 365d;
69
    send_timeout 365d;
70

71
    location / {
72
        proxy_pass https://127.0.0.1:5201;
73

74
        proxy_ssl_verify off;
75

76
        proxy_set_header Host $host;
77
        proxy_set_header X-Real-IP $remote_addr;
78
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
79
        proxy_set_header X-Forwarded-Proto $scheme;
80
    }
81
}
82

83
server {
84
    listen 30721 ssl http2;
85

86
    ssl_certificate /server/cert/cialo.site_bundle.crt;
87
    ssl_certificate_key /server/cert/cialo.site.key;
88

89
    proxy_buffering off;
90
    proxy_request_buffering off;
91

92
    location / {
93
        proxy_pass http://172.17.0.1;
94
        proxy_set_header Host $host;
95
        proxy_set_header X-Real-IP $remote_addr;
96
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
97
        proxy_set_header X-Forwarded-Proto $scheme;
98
    }
99
}

1
# You should look at the following URL's in order to grasp a solid understanding
2
# of Nginx configuration files in order to fully unleash the power of Nginx.
3
# https://www.nginx.com/resources/wiki/start/
4
# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
5
# https://wiki.debian.org/Nginx/DirectoryStructure
6
#
7
# In most cases, administrators will remove this file from sites-enabled/ and
8
# leave it as reference inside of sites-available where it will continue to be
9
# updated by the nginx packaging team.
10
#
11
# This file will automatically load configuration files provided by other
12
# applications, such as Drupal or Wordpress. These applications will be made
13
# available underneath a path with that package name, such as /drupal8.
14
#
15
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
16

17
# Virtual Host configuration for example.com
18
#
19
# You can move that to a different file under sites-available/ and symlink that
20
# to sites-enabled/ to enable it.
21
#
22
#server {
23
#  listen 80;
24
#  listen [::]:80;
25
#
26
#  server_name example.com;
27
#
28
#  root /var/www/example.com;
29
#  index index.html;
30
#
31
#  location / {
32
#    try_files $uri $uri/ =404;
33
#  }
34
#}

1
    # Note: You should disable gzip for SSL traffic.
2
    # See: https://bugs.debian.org/773332
3
    #
4
    # Read up on ssl_ciphers to ensure a secure configuration.
5
    # See: https://bugs.debian.org/765782
6
    #
7
    # Self signed certs generated by the ssl-cert package
8
    # Don't use them in a production server!
9
    #
10
    # include snippets/snakeoil.conf;
11

12
    location / {
13
        # First attempt to serve request as file, then
14
        # as directory, then fall back to displaying a 404.
15
        try_files $uri $uri/ =404;
16
    }
17

18
    # pass PHP scripts to FastCGI server
19
    #
20
    #location ~ \.php$ {
21
    #  include snippets/fastcgi-php.conf;
22
    #
23
    #  # With php-fpm (or other unix sockets):
24
    #  fastcgi_pass unix:/run/php/php7.4-fpm.sock;
25
    #  # With php-cgi (or other tcp sockets):
26
    #  fastcgi_pass 127.0.0.1:9000;
27
    #}
28

29
    # deny access to .htaccess files, if Apache's document root
30
    # concurs with nginx's one
31
    #
32
    #location ~ /\.ht {
33
    #  deny all;
34
    #}