307 lines
12 KiB
HTML
307 lines
12 KiB
HTML
<!DOCTYPE html>
|
||
|
||
<html lang="en-US">
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta http-equiv="X-UA-Compatible" content="IE=Edge">
|
||
|
||
|
||
<title>Nginx - Gancio</title>
|
||
|
||
|
||
|
||
|
||
<link rel="shortcut icon" href="https://gancio.org/favicon.ico" type="image/x-icon">
|
||
|
||
<link rel="stylesheet" href="https://gancio.org/assets/css/just-the-docs.css">
|
||
|
||
|
||
|
||
|
||
<script type="text/javascript" src="https://gancio.org/assets/js/vendor/lunr.min.js"></script>
|
||
|
||
<script type="text/javascript" src="https://gancio.org/assets/js/just-the-docs.js"></script>
|
||
|
||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||
|
||
<!-- Begin Jekyll SEO tag v2.6.1 -->
|
||
<title>Nginx | Gancio</title>
|
||
<meta name="generator" content="Jekyll v3.8.6" />
|
||
<meta property="og:title" content="Nginx" />
|
||
<meta property="og:locale" content="en_US" />
|
||
<meta name="description" content="A shared agenda for local communities" />
|
||
<meta property="og:description" content="A shared agenda for local communities" />
|
||
<link rel="canonical" href="https://gancio.org/setup/nginx" />
|
||
<meta property="og:url" content="https://gancio.org/setup/nginx" />
|
||
<meta property="og:site_name" content="Gancio" />
|
||
<script type="application/ld+json">
|
||
{"@type":"WebPage","url":"https://gancio.org/setup/nginx","headline":"Nginx","description":"A shared agenda for local communities","@context":"https://schema.org"}</script>
|
||
<!-- End Jekyll SEO tag -->
|
||
|
||
</head>
|
||
|
||
<body>
|
||
|
||
<div class="page-wrap">
|
||
<div class="side-bar">
|
||
<a href="https://gancio.org/" class="site-title fs-6 lh-tight">Gancio</a>
|
||
<span class="fs-3"><button class="js-main-nav-trigger navigation-list-toggle btn btn-outline" type="button" data-text-toggle="Hide">Menu</button></span>
|
||
<div class="navigation main-nav js-main-nav">
|
||
<nav role="navigation" aria-label="Main navigation">
|
||
<ul class="navigation-list">
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item active">
|
||
|
||
<a href="https://gancio.org/404.html" class="navigation-list-link"></a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item">
|
||
|
||
<a href="https://gancio.org/" class="navigation-list-link">Home</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item active">
|
||
|
||
<a href="https://gancio.org/setup" class="navigation-list-link">Setup</a>
|
||
|
||
|
||
<ul class="navigation-list-child-list ">
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item ">
|
||
|
||
<a href="https://gancio.org/setup/classic" class="navigation-list-link">Classic</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
<li class="navigation-list-item ">
|
||
|
||
<a href="https://gancio.org/setup/docker" class="navigation-list-link">Docker</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
<li class="navigation-list-item active">
|
||
|
||
<a href="https://gancio.org/setup/nginx" class="navigation-list-link active">Nginx</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
</ul>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item">
|
||
|
||
<a href="https://gancio.org/config" class="navigation-list-link">Configuration</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item">
|
||
|
||
<a href="https://gancio.org/usage" class="navigation-list-link">Usage</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item">
|
||
|
||
<a href="https://gancio.org/admin" class="navigation-list-link">Admin</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item">
|
||
|
||
<a href="https://gancio.org/dev" class="navigation-list-link">Develop</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
|
||
|
||
<li class="navigation-list-item">
|
||
|
||
<a href="https://gancio.org/contribute" class="navigation-list-link">Contribute</a>
|
||
|
||
</li>
|
||
|
||
|
||
|
||
</ul>
|
||
</nav>
|
||
|
||
</div>
|
||
<footer role="contentinfo" class="site-footer">
|
||
<p class="text-small text-grey-dk-000 mb-0">This site uses <a href="https://github.com/pmarsceill/just-the-docs">Just the Docs</a>, a documentation theme for Jekyll.</p>
|
||
</footer>
|
||
</div>
|
||
<div class="main-content-wrap js-main-content" tabindex="0">
|
||
<div class="page-header">
|
||
<div class="main-content">
|
||
|
||
<div class="search js-search">
|
||
<div class="search-input-wrap">
|
||
<input type="text" class="js-search-input search-input" tabindex="0" placeholder="Search Gancio" aria-label="Search Gancio" autocomplete="off">
|
||
<svg width="14" height="14" viewBox="0 0 28 28" xmlns="http://www.w3.org/2000/svg" class="search-icon"><title>Search</title><g fill-rule="nonzero"><path d="M17.332 20.735c-5.537 0-10-4.6-10-10.247 0-5.646 4.463-10.247 10-10.247 5.536 0 10 4.601 10 10.247s-4.464 10.247-10 10.247zm0-4c3.3 0 6-2.783 6-6.247 0-3.463-2.7-6.247-6-6.247s-6 2.784-6 6.247c0 3.464 2.7 6.247 6 6.247z"/><path d="M11.672 13.791L.192 25.271 3.02 28.1 14.5 16.62z"/></g></svg>
|
||
</div>
|
||
<div class="js-search-results search-results-wrap"></div>
|
||
</div>
|
||
|
||
|
||
<ul class="list-style-none text-small mt-md-1 mb-md-1 pb-4 pb-md-0 js-aux-nav aux-nav">
|
||
|
||
<li class="d-inline-block my-0"><a href="https://git.lattuga.net/cisti/gancio">Source</a></li>
|
||
|
||
</ul>
|
||
|
||
</div>
|
||
</div>
|
||
<div class="main-content">
|
||
|
||
|
||
<nav class="breadcrumb-nav">
|
||
<ol class="breadcrumb-nav-list">
|
||
|
||
<li class="breadcrumb-nav-list-item"><a href="https://gancio.org/setup">Setup</a></li>
|
||
|
||
<li class="breadcrumb-nav-list-item"><span>Nginx</span></li>
|
||
</ol>
|
||
</nav>
|
||
|
||
|
||
<div id="main-content" class="page-content" role="main">
|
||
<h2 id="nginx-proxy-configuration">Nginx proxy configuration</h2>
|
||
<p>This is the default nginx configuration for gancio, please modify at least the <strong>server_name</strong> and <strong>ssl_certificate</strong>’s path</p>
|
||
|
||
<div class="language-nginx highlighter-rouge"><div class="highlight"><pre class="highlight"><code><span class="k">server</span> <span class="p">{</span>
|
||
<span class="kn">listen</span> <span class="mi">80</span><span class="p">;</span>
|
||
<span class="kn">listen</span> <span class="s">[::]:80</span><span class="p">;</span>
|
||
<span class="kn">server_name</span> <span class="s">gancio.cisti.org</span><span class="p">;</span>
|
||
<span class="kn">root</span> <span class="n">/var/www/letsencrypt</span><span class="p">;</span>
|
||
<span class="kn">location</span> <span class="n">/.well-known/acme-challenge/</span> <span class="p">{</span> <span class="kn">allow</span> <span class="s">all</span><span class="p">;</span> <span class="p">}</span>
|
||
<span class="kn">location</span> <span class="n">/</span> <span class="p">{</span> <span class="kn">return</span> <span class="mi">301</span> <span class="s">https://</span><span class="nv">$host$request_uri</span><span class="p">;</span> <span class="p">}</span>
|
||
<span class="p">}</span>
|
||
|
||
<span class="k">server</span> <span class="p">{</span>
|
||
<span class="kn">listen</span> <span class="mi">443</span> <span class="s">ssl</span> <span class="s">http2</span><span class="p">;</span>
|
||
<span class="kn">listen</span> <span class="s">[::]:443</span> <span class="s">ssl</span> <span class="s">http2</span><span class="p">;</span>
|
||
<span class="kn">server_name</span> <span class="s">gancio.cisti.org</span><span class="p">;</span>
|
||
|
||
<span class="kn">ssl_protocols</span> <span class="s">TLSv1.2</span><span class="p">;</span>
|
||
<span class="kn">ssl_ciphers</span> <span class="s">HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA</span><span class="p">;</span>
|
||
<span class="kn">ssl_prefer_server_ciphers</span> <span class="no">on</span><span class="p">;</span>
|
||
<span class="kn">ssl_session_cache</span> <span class="s">shared:SSL:10m</span><span class="p">;</span>
|
||
|
||
<span class="c1"># Uncomment these lines once you acquire a certificate:
|
||
</span> <span class="c1"># ssl_certificate /etc/letsencrypt/live/gancio.cisti.org/fullchain.pem;
|
||
</span> <span class="c1"># ssl_certificate_key /etc/letsencrypt/live/gancio.cisti.org/privkey.pem;
|
||
</span>
|
||
<span class="kn">keepalive_timeout</span> <span class="mi">70</span><span class="p">;</span>
|
||
<span class="kn">sendfile</span> <span class="no">on</span><span class="p">;</span>
|
||
<span class="kn">client_max_body_size</span> <span class="mi">80m</span><span class="p">;</span>
|
||
|
||
<span class="kn">gzip</span> <span class="no">on</span><span class="p">;</span>
|
||
<span class="kn">gzip_disable</span> <span class="s">"msie6"</span><span class="p">;</span>
|
||
<span class="kn">gzip_vary</span> <span class="no">on</span><span class="p">;</span>
|
||
<span class="kn">gzip_proxied</span> <span class="s">any</span><span class="p">;</span>
|
||
<span class="kn">gzip_comp_level</span> <span class="mi">6</span><span class="p">;</span>
|
||
<span class="kn">gzip_buffers</span> <span class="mi">16</span> <span class="mi">8k</span><span class="p">;</span>
|
||
<span class="kn">gzip_http_version</span> <span class="mi">1</span><span class="s">.1</span><span class="p">;</span>
|
||
<span class="kn">gzip_types</span> <span class="nc">text/plain</span> <span class="nc">text/css</span> <span class="nc">application/json</span> <span class="nc">application/javascript</span> <span class="nc">text/xml</span> <span class="nc">application/xml</span> <span class="nc">application/xml</span><span class="s">+rss</span> <span class="nc">text/javascript</span><span class="p">;</span>
|
||
|
||
<span class="kn">add_header</span> <span class="s">Strict-Transport-Security</span> <span class="s">"max-age=31536000"</span><span class="p">;</span>
|
||
|
||
<span class="kn">location</span> <span class="n">/</span> <span class="p">{</span>
|
||
<span class="kn">try_files</span> <span class="nv">$uri</span> <span class="s">@proxy</span><span class="p">;</span>
|
||
<span class="p">}</span>
|
||
|
||
<span class="kn">location</span> <span class="s">@proxy</span> <span class="p">{</span>
|
||
<span class="kn">proxy_set_header</span> <span class="s">Host</span> <span class="nv">$host</span><span class="p">;</span>
|
||
<span class="kn">proxy_set_header</span> <span class="s">X-Forwarded-Proto</span> <span class="s">https</span><span class="p">;</span>
|
||
<span class="kn">proxy_set_header</span> <span class="s">Proxy</span> <span class="s">""</span><span class="p">;</span>
|
||
<span class="kn">proxy_pass_header</span> <span class="s">Server</span><span class="p">;</span>
|
||
|
||
<span class="kn">proxy_pass</span> <span class="s">http://127.0.0.1:13120</span><span class="p">;</span>
|
||
<span class="kn">proxy_buffering</span> <span class="no">on</span><span class="p">;</span>
|
||
<span class="kn">proxy_redirect</span> <span class="no">off</span><span class="p">;</span>
|
||
<span class="kn">proxy_http_version</span> <span class="mi">1</span><span class="s">.1</span><span class="p">;</span>
|
||
<span class="kn">proxy_set_header</span> <span class="s">Upgrade</span> <span class="nv">$http_upgrade</span><span class="p">;</span>
|
||
<span class="kn">proxy_set_header</span> <span class="s">Connection</span> <span class="nv">$connection_upgrade</span><span class="p">;</span>
|
||
|
||
<span class="kn">tcp_nodelay</span> <span class="no">on</span><span class="p">;</span>
|
||
<span class="p">}</span>
|
||
<span class="p">}</span>
|
||
|
||
</code></pre></div></div>
|
||
|
||
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
</body>
|
||
</html>
|