update configuration
This commit is contained in:
parent
a7465e1150
commit
ff36f3fb2f
|
@ -31,7 +31,7 @@ apt-get update && apt-get upgrade -y && apt-get autoremove --purge -y && apt-get
|
||||||
### Install useful packages
|
### Install useful packages
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
sudo apt-get install haveged curl git unzip zip fail2ban htop nload nmon ntp gnupg gnupg2 wget pigz tree ccze -y
|
sudo apt-get install haveged curl git unzip zip fail2ban htop nload nmon ntp gnupg gnupg2 wget pigz tree ccze mycli -y
|
||||||
```
|
```
|
||||||
|
|
||||||
### Clone the repository
|
### Clone the repository
|
||||||
|
|
|
@ -31,7 +31,7 @@ apt-get update && apt-get upgrade -y && apt-get autoremove --purge -y && apt-get
|
||||||
### Install useful packages
|
### Install useful packages
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
sudo apt-get install haveged curl git unzip zip fail2ban htop nload nmon ntp gnupg gnupg2 wget pigz tree ccze -y
|
sudo apt-get install haveged curl git unzip zip fail2ban htop nload nmon ntp gnupg gnupg2 wget pigz tree ccze mycli -y
|
||||||
```
|
```
|
||||||
|
|
||||||
### Clone the repository
|
### Clone the repository
|
||||||
|
|
|
@ -11,9 +11,3 @@ fastcgi_temp_file_write_size 512K;
|
||||||
fastcgi_param SERVER_NAME $http_host;
|
fastcgi_param SERVER_NAME $http_host;
|
||||||
fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
|
fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
|
||||||
fastcgi_keep_conn on;
|
fastcgi_keep_conn on;
|
||||||
|
|
||||||
#Others
|
|
||||||
open_file_cache max=2000 inactive=20s;
|
|
||||||
open_file_cache_valid 60s;
|
|
||||||
open_file_cache_min_uses 5;
|
|
||||||
open_file_cache_errors off;
|
|
|
@ -0,0 +1,19 @@
|
||||||
|
directio 4m;
|
||||||
|
directio_alignment 512;
|
||||||
|
http2_max_field_size 16k;
|
||||||
|
http2_max_header_size 32k;
|
||||||
|
|
||||||
|
keepalive_disable msie6;
|
||||||
|
large_client_header_buffers 8 64k;
|
||||||
|
|
||||||
|
|
||||||
|
open_file_cache max=50000 inactive=60s;
|
||||||
|
open_file_cache_errors off;
|
||||||
|
open_file_cache_min_uses 2;
|
||||||
|
open_file_cache_valid 120s;
|
||||||
|
open_log_file_cache max=10000 inactive=30s min_uses=2;
|
||||||
|
|
||||||
|
postpone_output 1460;
|
||||||
|
proxy_buffers 8 32k;
|
||||||
|
proxy_buffer_size 64k;
|
||||||
|
|
|
@ -61,7 +61,11 @@ http
|
||||||
aio threads;
|
aio threads;
|
||||||
|
|
||||||
# tls dynamic records patch directive
|
# tls dynamic records patch directive
|
||||||
ssl_dyn_rec_enable on;
|
ssl_dyn_rec_enable on;
|
||||||
|
ssl_dyn_rec_size_hi 4229;
|
||||||
|
ssl_dyn_rec_size_lo 1369;
|
||||||
|
ssl_dyn_rec_threshold 40;
|
||||||
|
ssl_dyn_rec_timeout 1000;
|
||||||
|
|
||||||
# nginx-vts-status module
|
# nginx-vts-status module
|
||||||
vhost_traffic_status_zone;
|
vhost_traffic_status_zone;
|
||||||
|
@ -80,6 +84,10 @@ http
|
||||||
##
|
##
|
||||||
# SSL Settings
|
# SSL Settings
|
||||||
##
|
##
|
||||||
|
|
||||||
|
# SSL Early Data
|
||||||
|
ssl_early_data off;
|
||||||
|
|
||||||
ssl_protocols TLSv1.2 TLSv1.3;
|
ssl_protocols TLSv1.2 TLSv1.3;
|
||||||
ssl_ciphers 'TLS13+AESGCM+AES128:EECDH+AES128';
|
ssl_ciphers 'TLS13+AESGCM+AES128:EECDH+AES128';
|
||||||
ssl_prefer_server_ciphers on;
|
ssl_prefer_server_ciphers on;
|
||||||
|
|
|
@ -0,0 +1,15 @@
|
||||||
|
[Unit]
|
||||||
|
Description=The NGINX HTTP and reverse proxy server
|
||||||
|
After=syslog.target network.target remote-fs.target nss-lookup.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=forking
|
||||||
|
PIDFile=/run/nginx.pid
|
||||||
|
ExecStartPre=/usr/sbin/nginx -t
|
||||||
|
ExecStart=/usr/sbin/nginx
|
||||||
|
ExecReload=/bin/kill -s HUP $MAINPID
|
||||||
|
ExecStop=/bin/kill -s QUIT $MAINPID
|
||||||
|
PrivateTmp=true
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
Loading…
Reference in New Issue