mirror of
https://github.com/mofeng-git/One-KVM.git
synced 2025-12-13 01:30:31 +08:00
3d109453c6
RFC 8555 section 8.3 [1] states HTTP challenge MUST be served over TCP port 80 and while the verification follows redirects, those are unneed and migh be harmful in specific deployment scenarios. [1] https://datatracker.ietf.org/doc/html/rfc8555#section-8.3 Signed-off-by: Wojtek Porczyk <woju@invisiblethingslab.com>
54 lines
1.2 KiB
Nginx Configuration File
54 lines
1.2 KiB
Nginx Configuration File
worker_processes 4;
|
|
|
|
# error_log /tmp/kvmd-nginx.error.log;
|
|
error_log stderr;
|
|
|
|
include /usr/share/kvmd/extras/*/nginx.ctx-main.conf;
|
|
|
|
events {
|
|
worker_connections 1024;
|
|
use epoll;
|
|
multi_accept on;
|
|
}
|
|
|
|
http {
|
|
types_hash_max_size 4096;
|
|
server_names_hash_bucket_size 128;
|
|
|
|
access_log off;
|
|
|
|
include /etc/kvmd/nginx/mime-types.conf;
|
|
default_type application/octet-stream;
|
|
charset utf-8;
|
|
|
|
sendfile on;
|
|
tcp_nodelay on;
|
|
tcp_nopush on;
|
|
keepalive_timeout 10;
|
|
client_max_body_size 4k;
|
|
|
|
client_body_temp_path /tmp/kvmd-nginx/client_body_temp;
|
|
fastcgi_temp_path /tmp/kvmd-nginx/fastcgi_temp;
|
|
proxy_temp_path /tmp/kvmd-nginx/proxy_temp;
|
|
scgi_temp_path /tmp/kvmd-nginx/scgi_temp;
|
|
uwsgi_temp_path /tmp/kvmd-nginx/uwsgi_temp;
|
|
|
|
include /etc/kvmd/nginx/kvmd.ctx-http.conf;
|
|
include /usr/share/kvmd/extras/*/nginx.ctx-http.conf;
|
|
|
|
server {
|
|
server_name localhost;
|
|
include /etc/kvmd/nginx/listen-http.conf;
|
|
include /etc/kvmd/nginx/certbot.ctx-server.conf;
|
|
include /etc/kvmd/nginx/redirect-to-https.conf;
|
|
}
|
|
|
|
server {
|
|
server_name localhost;
|
|
include /etc/kvmd/nginx/listen-https.conf;
|
|
include /etc/kvmd/nginx/ssl.conf;
|
|
include /etc/kvmd/nginx/kvmd.ctx-server.conf;
|
|
include /usr/share/kvmd/extras/*/nginx.ctx-server.conf;
|
|
}
|
|
}
|