GithubFollow/One-KVM
1
0
Fork 0
mirror of https://github.com/mofeng-git/One-KVM.git synced 2026-01-29 00:51:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

modular nginx configuration

Browse Source
This commit is contained in:
Devaev Maxim
2018-12-15 17:01:23 +03:00
parent d652a02ac9
commit 510300df35
6 changed files with 24 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
configs/nginx/loc-login.conf Normal file
View File

@@ -0,0 +1,2 @@
error_page 401 = @login;
error_page 403 = @login;

0
configs/nginx/proxy-params.conf → configs/nginx/loc-proxy.conf
View File

5
configs/nginx/loc-websocket.conf Normal file
View File

@@ -0,0 +1,5 @@
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_connect_timeout 7d;
proxy_send_timeout 7d;
proxy_read_timeout 7d;

33
configs/nginx/nginx.conf
View File

@@ -4,7 +4,7 @@ worker_processes 4;
# error_log /tmp/nginx.error.log;
error_log stderr;
include /usr/share/kvmd/extras/*/nginx.main-ctx.conf;
include /usr/share/kvmd/extras/*/nginx.ctx-main.conf;
events {
worker_connections 1024;
@@ -42,7 +42,7 @@ http {
server 127.0.0.1:8082 fail_timeout=0s max_fails=0;
}
include /usr/share/kvmd/extras/*/nginx.http-ctx.conf;
include /usr/share/kvmd/extras/*/nginx.ctx-http.conf;
#PROD server {
#PROD listen 80;
@@ -53,13 +53,7 @@ http {
server {
#PROD listen 443 ssl http2;
server_name localhost;
#PROD ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#PROD ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
#PROD ssl_certificate /etc/nginx/ssl/server.crt;
#PROD ssl_certificate_key /etc/nginx/ssl/server.key;
#PROD add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
#PROD include /etc/nginx/ssl.conf;
auth_request /auth;
@@ -73,8 +67,7 @@ http {
location / {
root /usr/share/kvmd/web;
error_page 401 = @login;
error_page 403 = @login;
include /etc/nginx/loc-login.conf;
}
location @login {
@@ -105,12 +98,8 @@ http {
rewrite ^/kvmd/ws$ /ws break;
rewrite ^/kvmd/ws\?(.*)$ /ws?$1 break;
proxy_pass http://kvmd;
include /etc/nginx/proxy-params.conf;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_connect_timeout 7d;
proxy_send_timeout 7d;
proxy_read_timeout 7d;
include /etc/nginx/loc-proxy.conf;
include /etc/nginx/loc-websocket.conf;
auth_request off;
}
@@ -118,7 +107,7 @@ http {
rewrite ^/kvmd/msd/write$ /msd/write break;
rewrite ^/kvmd/msd/write\?(.*)$ /msd/write?$1 break;
proxy_pass http://kvmd;
include /etc/nginx/proxy-params.conf;
include /etc/nginx/loc-proxy.conf;
limit_rate 6250k;
limit_rate_after 50k;
client_max_body_size 0;
@@ -130,7 +119,7 @@ http {
rewrite ^/kvmd/log$ /log break;
rewrite ^/kvmd/log\?(.*)$ /log?$1 break;
proxy_pass http://kvmd;
include /etc/nginx/proxy-params.conf;
include /etc/nginx/loc-proxy.conf;
proxy_read_timeout 7d;
postpone_output 0;
proxy_buffering off;
@@ -142,7 +131,7 @@ http {
rewrite ^/kvmd$ / break;
rewrite ^/kvmd/(.*)$ /$1 break;
proxy_pass http://kvmd;
include /etc/nginx/proxy-params.conf;
include /etc/nginx/loc-proxy.conf;
auth_request off;
}
@@ -151,12 +140,12 @@ http {
rewrite ^/streamer\?(.*)$ ?$1 break;
rewrite ^/streamer/(.*)$ /$1 break;
proxy_pass http://ustreamer;
include /etc/nginx/proxy-params.conf;
include /etc/nginx/loc-proxy.conf;
postpone_output 0;
proxy_buffering off;
proxy_ignore_headers X-Accel-Buffering;
}
include /usr/share/kvmd/extras/*/nginx.server-ctx.conf;
include /usr/share/kvmd/extras/*/nginx.ctx-server.conf;
}
}

5
configs/nginx/ssl.conf Normal file
View File

@@ -0,0 +1,5 @@
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
ssl_certificate /etc/nginx/ssl/server.crt;
ssl_certificate_key /etc/nginx/ssl/server.key;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;