Jaffar Cardoso jaffarc

Configuring nginx for SSL SNI vhosts

Gotchas

Note that SHA2 hash algorithm may be not supported on older systems (Windows XP, Windows 2003, among others).
Be aware that mandatory https on SNI vhosts eliminate [Internet Explorer on Windows XP, among others] (http://en.wikipedia.org/wiki/Server_Name_Indication#Web_browsers.5B6.5D).

Remarks

My version of konklones SSL config does not have SPDY support(my nginx+openssl does not support it)
You need a default ssl server (example.org-default.conf).
Some SSL-options have to be unique across your instance, so it's easier to have them in a common file(ssl.conf).

How to have specific .gitignore for each git branch

Objective

My objective is to have some production files ignored on specific branches. Git doesn't allow to do it.

Solution

My solution is to make a general .gitignore file and add .gitignore.branch_name files for the branches I want to add specific file exclusion. I'll use post-checkout hook to copy those .gitignore.branch_name in place of .git/info/exclude each time I go to the branch with git checkout branch_name.

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

	#!/bin/bash

	# Flush all current rules from iptables
	iptables -F

	# Allow established connections
	iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

	# Allow MongoDB
	iptables -A INPUT -s 10.182.226.217 -p tcp --dport 27017 -j ACCEPT

	function gen-ssh-config-for-multipass --description "Generate a SSH config for multipass."
	echo 'Include ~/.ssh/config

	Host mp-*
	User multipass
	'
	set -l vms (multipass ls --format csv \| grep Running)
	for vm in $vms
	set name (echo $vm \| awk -F , '{ print $1 }')
	set ip (echo $vm \| awk -F , '{ print $3 }')

	Add the `replication` section to the mongod.conf file:

	```
	$cat /usr/local/etc/mongod.conf
	systemLog:
	destination: file
	path: /usr/local/var/log/mongodb/mongo.log
	logAppend: true
	storage:
	engine: mmapv1

	#!/bin/sh

	### BEGIN INIT INFO
	# Provides: mongod
	# Required-Start: $local_fs $remote_fs $network $syslog
	# Required-Stop: $local_fs $remote_fs $network $syslog
	# Default-Start: 2 3 4 5
	# Default-Stop: 0 1 6
	# Short-Description: Starts the MongoDB database server
	# Description: Starts the MongoDB database server

	#!/bin/bash
	# Usage: gh-rename-master <newbranch> [<remote>]
	#
	# Renames the "master" branch of the current repository both locally and on GitHub.
	#
	# dependencies: GitHub CLI v0.10
	set -e

	newbranch="${1?}"
	remote="${2:-origin}"

	const { createLogger, format, transports } = require('winston')
	const moment = require('moment')

	// set default log level.
	const logLevel = 'info'

	var logger = createLogger({
	level: logLevel,
	levels: {
	fatal: 0,

	# Location: /etc/nginx/sites-available/domain.tld.conf
	server {
	listen 80;

	# listen 443 ssl;
	# include snippets/snakeoil.conf;

	root /var/www/domain.tld/public;

	index index.html index.php;