unaiquenet - Backend - Server - Nginx - SOURCE CODE

# https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
# PHP 7 starten: /etc/init.d/php7.0-fpm restart

##### Test for new SSL Certs
##### apt update
##### apt install python3 python3-venv libaugeas0
##### pip install -U pip
##### pip install -U certbot
##### certbot renew --standalone --agree-tos -v


user  www-data;
worker_processes 2;  ## Default: 1
error_log  /var/log/nginx/error.log;
pid        /var/log/nginx/nginx.pid;
#worker_rlimit_nofile 18192;
worker_rlimit_nofile 40000;

events {
	worker_connections 46096;
	multi_accept on;
	use epoll;
	#use kqueue;
}


http {
	include /etc/nginx/blocklist.conf;
	error_page 403 =404 /error.html;

	fastcgi_cache_path /dev/shm/ levels=1:2 keys_zone=phpcache:1500m inactive=10080m;
	fastcgi_cache_key "$scheme$request_method$host$request_uri";
	
	include 	/etc/nginx/mime.types;
	include 	/etc/nginx/fastcgi.conf;
	index 		index.html index.htm index.php;
	default_type text/html;

	log_format main '[$time_local] "$request" '
                '$status $body_bytes_sent "$http_referer" '
                '"$http_user_agent" "$http_x_forwarded_for"';    
				
	access_log   /var/log/nginx/access.main.log main;
	#server_names_hash_bucket_size 128; # this seems to be required for some vhosts

	read_ahead                512K; # kernel read head set to the output_buffers
	recursive_error_pages     on;
	sendfile                  on;# on for decent direct disk I/O
	sendfile_max_chunk 	  	  1m;
	server_tokens             off;# version number in error pages

... [truncated, 194 more lines] ...