forked from chr4/salt-nginx
-
Notifications
You must be signed in to change notification settings - Fork 0
/
nginx.conf.jinja
40 lines (31 loc) · 1 KB
/
nginx.conf.jinja
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# vim: ft=nginx
# Automatically adjust worker_processes to available CPU cores
worker_processes {{ grains['num_cpus'] }};
user www-data;
events {
worker_connections 1024;
}
# Log to /dev/log, so journald can collect them
# TODO: Doesn't work for error_log, still created in /var/log/nginx
error_log syslog:server=unix:/dev/log;
http {
access_log syslog:server=unix:/dev/log;
include mime.types;
default_type application/octet-stream;
sendfile on;
keepalive_timeout 65;
gzip off;
server_tokens off;
# Global TLS settings
ssl_protocols {{ ssl_protocols }};
ssl_ciphers {{ ssl_ciphers }};
{% for item in ssl_conf_command|sort -%}
ssl_conf_command {{ item }};
{% endfor -%}
ssl_session_cache {{ ssl_session_cache }};
ssl_prefer_server_ciphers {{ ssl_prefer_server_ciphers }};
ssl_stapling {{ ssl_stapling }};
ssl_stapling_verify {{ ssl_stapling_verify }};
ssl_session_tickets {{ ssl_session_tickets }};
include /etc/nginx/conf.d/*.conf;
}