From b5c6b553807777c331353fd737b61b5fd8e0190b Mon Sep 17 00:00:00 2001 From: Ajay Ramachandran Date: Tue, 24 Aug 2021 21:10:57 +0200 Subject: [PATCH] Update nginx config --- nginx/nginx.conf | 61 ++++++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 56 insertions(+), 5 deletions(-) diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 9cd099d..435203e 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -6,13 +6,20 @@ events { } http { + log_format no_ip '$remote_user [$time_local] ' + '"$request" $status $body_bytes_sent ' + '"$http_referer" "$http_user_agent" "$gzip_ratio"'; + + log_format user_agent '[$time_local] ' + '"$http_referer" "$http_user_agent" "$gzip_ratio"'; + include /etc/nginx/mime.types; include /etc/nginx/proxy.conf; include /etc/nginx/fastcgi.conf; upstream backend_GET { least_conn; - server localhost:4441; + #server localhost:4441; #server localhost:4442; #server localhost:4443; #server localhost:4444; @@ -87,6 +94,10 @@ http { proxy_pass http://backend_$request_method; #proxy_cache CACHEZONE; #proxy_cache_valid 2m; + + if ($request_method = POST) { + access_log /etc/nginx/logs/submissions.log user_agent; + } } location /api/getTopUsers { @@ -106,7 +117,8 @@ http { } location /download/ { - gzip on; + access_log /etc/nginx/logs/download.log no_ip; + gzip on; gzip_types text/plain application/json; #alias /home/sbadmin/sponsor/docker/database-export/; alias /home/sbadmin/sponsor/docker/database-export/; @@ -149,8 +161,8 @@ http { #listen 443 http3 reuseport; #ssl_protocols TLSv1.2 TLSv1.3; #listen 80; - ssl_certificate /etc/letsencrypt/live/sponsor.ajay.app-0001/fullchain.pem; # managed by Certbot - ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0001/privkey.pem; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/sponsor.ajay.app-0003/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0003/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot @@ -160,6 +172,12 @@ http { + + + + + + } server { @@ -228,4 +246,37 @@ http { return 404; # managed by Certbot -}} +} + + server { + server_name wiki.sponsor.ajay.app; # managed by Certbot + + location / { + proxy_pass http://10.0.0.3:8080; + } + + + listen 443 ssl http2; # managed by Certbot + #listen 443 http3 reuseport; + #ssl_protocols TLSv1.2 TLSv1.3; + #listen 80; + ssl_certificate /etc/letsencrypt/live/sponsor.ajay.app-0003/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/sponsor.ajay.app-0003/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + + + + + + + + + + + + + +} + +}