8 changed files with 118 additions and 4 deletions
@ -0,0 +1,69 @@ |
|||||
|
server { |
||||
|
listen ${NGINX_PORT}; |
||||
|
listen [::]:${NGINX_PORT}; |
||||
|
|
||||
|
server_name ${NGINX_DOMAIN}; |
||||
|
root /var/www/${NGINX_DOMAIN}/public; |
||||
|
|
||||
|
# $uri, index.html |
||||
|
location / { |
||||
|
try_files $uri $uri/ /index.html; |
||||
|
} |
||||
|
|
||||
|
# headers |
||||
|
add_header X-Frame-Options "SAMEORIGIN" always; |
||||
|
add_header X-XSS-Protection "1; mode=block" always; |
||||
|
add_header X-Content-Type-Options "nosniff" always; |
||||
|
add_header X-UA-Compatible "IE=Edge" always; |
||||
|
add_header Cache-Control "no-transform" always; |
||||
|
|
||||
|
# . files |
||||
|
location ~ /\. { |
||||
|
deny all; |
||||
|
} |
||||
|
|
||||
|
# assets, media |
||||
|
location ~* \.(?:css(\.map)?|js(\.map)?|jpe?g|png|gif|ico|cur|heic|webp|tiff?|mp3|m4a|aac|ogg|midi?|wav|mp4|mov|webm|mpe?g|avi|ogv|flv|wmv)$ { |
||||
|
expires 7d; |
||||
|
access_log off; |
||||
|
} |
||||
|
|
||||
|
# svg, fonts |
||||
|
location ~* \.(?:svgz?|ttf|ttc|otf|eot|woff|woff2)$ { |
||||
|
add_header Access-Control-Allow-Origin "*"; |
||||
|
expires 7d; |
||||
|
access_log off; |
||||
|
} |
||||
|
|
||||
|
location ^~ /wetty { |
||||
|
proxy_pass http://${WETTY_HOST}:${WETTY_PORT}; |
||||
|
proxy_http_version 1.1; |
||||
|
proxy_set_header Upgrade $http_upgrade; |
||||
|
proxy_set_header Connection "upgrade"; |
||||
|
proxy_read_timeout 43200000; |
||||
|
|
||||
|
proxy_set_header X-Real-IP $remote_addr; |
||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |
||||
|
proxy_set_header Host $http_host; |
||||
|
proxy_set_header X-NginX-Proxy true; |
||||
|
} |
||||
|
|
||||
|
# gzip |
||||
|
gzip on; |
||||
|
gzip_vary on; |
||||
|
gzip_proxied any; |
||||
|
gzip_comp_level 6; |
||||
|
gzip_types text/plain text/css text/xml application/json application/javascript application/xml+rss application/atom+xml image/svg+xml; |
||||
|
} |
||||
|
|
||||
|
# subdomains redirect |
||||
|
server { |
||||
|
listen ${NGINX_PORT}; |
||||
|
listen [::]:${NGINX_PORT}; |
||||
|
|
||||
|
server_name *.${NGINX_DOMAIN}; |
||||
|
|
||||
|
return 301 https://${NGINX_DOMAIN}$request_uri; |
||||
|
} |
||||
|
|
||||
|
# set ft=conf |
Loading…
Reference in new issue