Merge pull request #426 from mchangrh/tune-nginx

nginx tuning in lieu of http/2
This commit is contained in:
Ajay Ramachandran
2021-12-19 21:15:55 -05:00
committed by GitHub

View File

@@ -21,6 +21,12 @@ http {
types { types {
text/csv csv; text/csv csv;
} }
# keepalive settings
keepalive 5;
keepalive_request 10;
keepalive_timeout 5;
proxy_http_version 1.1;
proxy_set_header Connection "";
upstream backend_GET { upstream backend_GET {
ip_hash; ip_hash;
@@ -112,7 +118,7 @@ http {
#proxy_pass https://sbtest.etcinit.com/; #proxy_pass https://sbtest.etcinit.com/;
} }
#access_log /etc/nginx/logs/requests.log no_ip; #access_log /etc/nginx/logs/requests.log no_ip buffer=64k;
location /api/skipSegments { location /api/skipSegments {
#return 200 "[]"; #return 200 "[]";
@@ -123,7 +129,7 @@ http {
#access_log /etc/nginx/logs/download.log no_ip; #access_log /etc/nginx/logs/download.log no_ip;
gzip on; gzip on;
if ($request_method = POST) { if ($request_method = POST) {
access_log /etc/nginx/logs/submissions.log user_agent; access_log /etc/nginx/logs/submissions.log user_agent buffer=64k;
} }
#proxy_read_timeout 6s; #proxy_read_timeout 6s;
@@ -148,7 +154,7 @@ http {
} }
location /download/ { location /download/ {
#access_log /etc/nginx/logs/download.log no_ip; #access_log /etc/nginx/logs/download.log no_ip buffer=64k;
gzip on; gzip on;
proxy_cache CACHEZONE; proxy_cache CACHEZONE;
proxy_cache_valid 20m; proxy_cache_valid 20m;
@@ -199,14 +205,6 @@ http {
ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0001/privkey.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0001/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
@@ -231,10 +229,6 @@ http {
ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0001/privkey.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0001/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
@@ -284,9 +278,5 @@ http {
ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0001/privkey.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0001/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
} }