Skip to content

Instantly share code, notes, and snippets.

@paramah

paramah/gist:6596222

Last active December 23, 2015 06:49
Show Gist options
  • Save paramah/6596222 to your computer and use it in GitHub Desktop.
Save paramah/6596222 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. paramah revised this gist Sep 17, 2013. 1 changed file with 10 additions and 6 deletions.
    16 changes: 10 additions & 6 deletions gistfile1.nginxconf
    View file
    Original file line number Diff line number Diff line change
    @@ -16,15 +16,19 @@ server {
    ssl_prefer_server_ciphers on;

    location / {
    proxy_redirect off;
    proxy_redirect off;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Host $http_host;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_http_version 1.1;
    proxy_pass http://127.0.0.1:8080;
    proxy_intercept_errors on;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";

    proxy_http_version 1.1;

    proxy_pass http://127.0.0.1:8080;

    proxy_intercept_errors on;
    }
    }
  2. paramah created this gist Sep 17, 2013.
    30 changes: 30 additions & 0 deletions gistfile1.nginxconf
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,30 @@
    server {
    listen 443;

    server_name @@host@@;
    access_log /var/log/nginx/@@host@@.log;
    error_log /var/log/nginx/@@host@@.log;

    ssl on;
    ssl_certificate /etc/nginx/ssl/cert.crt;
    ssl_certificate_key /etc/nginx/ssl/key.key;
    ssl_client_certificate /etc/nginx/ssl/intermediate.crt;

    ssl_session_timeout 5m;
    ssl_protocols SSLv2 SSLv3 TLSv1;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;

    location / {
    proxy_redirect off;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Host $http_host;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_http_version 1.1;
    proxy_pass http://127.0.0.1:8080;
    proxy_intercept_errors on;
    }
    }