-
Notifications
You must be signed in to change notification settings - Fork 13
/
nginx-directives
316 lines (316 loc) · 14.8 KB
/
nginx-directives
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
http_events accept_mutex on -
http_events accept_mutex_delay 500ms -
http_events debug_connection none -
http_events devpoll_changes -
http_events multi_accept off -
http_events rtsig_signo -
http_events rtsig_overflow_* -
http_events use -
http_events worker_connections -
http_log access_log log/access.log combined http,server,location
http_log log_format combined "..." http
http_log open_log_file_cache off http
http_addition add_before_body no http,server,location
http_addition add_after_body no http,server,location
http_addition addition_types text/html http,server,location
http_headers add_header none http,server,location
http_headers expires off http,server,location
http_core aio off http,server,location
http_core alias no location
http_core chunked_transfer_encoding on http,server,location
http_core client_body_in_file_only off http,server,location
http_core client_body_in_single_buffer off http,server,location
http_core client_body_buffer_size 8k/16k http,server,location
http_core client_body_temp_path client_body_temp http,server,location
http_core client_body_timeout 60 http,server,location
http_core client_header_buffer_size 1k http,server
http_core client_header_timeout 60 http,server
http_core client_max_body_size 1m http,server,location
http_core connection_pool_size the_size 256 http
http_core default_type text/plain http,server,location
http_core directio off http,server,location
http_core error_page no http,server,location,ifinlocation
http_core if_modified_since exact http,server,location
http_core internal no location
http_core keepalive_disable msie6 safari http,server,location
http_core keepalive_timeout 75 http,server,location
http_core keepalive_requests 100 http,server,location
http_core large_client_header_buffers 4 4k/8k http,server
http_core limit_except no location
http_core limit_rate no http,server,location,ifinlocation
http_core limit_rate_after 1m http,server,location,ifinlocation
http_core lingering_close on http,server,location
http_core lingering_time lingering_close 30s http,server,location
http_core lingering_timeout 5s http,server,location
http_core listen 80 server
http_core location no server
http_core log_not_found on http,server,location
http_core log_subrequest off http,server,location
http_core msie_padding on http,server,location
http_core msie_refresh off http,server,location
http_core open_file_cache off http,server,location
http_core open_file_cache_errors off http,server,location
http_core open_file_cache_min_uses 1 http,server,location
http_core open_file_cache_valid 60 http,server,location
http_core optimize_server_names on http,server
http_core port_in_redirect on http,server,location
http_core post_action off http,server,location,if-in-location
http_core recursive_error_pages off http,server,location
http_core request_pool_size the_size 256 http
http_core reset_timedout_connection off http,server,location
http_core resolver no http,server,location
http_core resolver_timeout 30s http,server,location
http_core root html http,server,location,ifinlocation
http_core satisfy all http,server,location
http_core satisfy_any off http,server,location
http_core send_timeout 60 http,server,location
http_core sendfile off http,server,location
http_core server no http
http_core server_name "" server
http_core server_name_in_redirect on http,server,location
http_core server_names_hash_max_size 512 http
http_core server_names_hash_bucket_size 32/64/128 http
http_core server_tokens on http,server,location
http_core tcp_nodelay on http,server,location
http_core tcp_nopush off http,server,location
http_core try_files none server
http_core types - http,server,location
http_core underscores_in_headers off http,server
http_core variables_hash_bucket_size - http
http_core variables_hash_max_size - http
http_access allow none http,server,location,limit_except
http_access deny none http,server,location,limit_except
http_browser ancient_browser none http,server,location
http_browser ancient_browser_value - http,server,location
http_browser modern_browser none http,server,location
http_browser modern_browser_value - http,server,location
mail_core imap_capabilities "IMAP4" "IMAP4rev1" "UIDPLUS" main,server
mail_core imap_client_buffer 4K/8K main,server
mail_core listen no server
mail_core pop3_auth plain main,server
mail_core pop3_capabilities "TOP" "USER" "UIDL" main,server
mail_core protocol IMAP server
mail_core server no mail
mail_core server_name The name of the host, obtained through gethostname() mail,server
mail_core smtp_auth login plain main,server
mail_core smtp_capabilities no main,server
mail_core so_keepalive off main,server
mail_core timeout 60000 main,server
http_auth_basic auth_basic - http,server,location,limit_except
http_auth_basic auth_basic_user_file none http,server,location,limit_except
mail_auth auth_http no mail,server
mail_auth auth_http_header no mail,server
mail_auth auth_http_timeout 60000 mail,server
http_autoindex autoindex - http,server,location
http_autoindex autoindex_exact_size - http,server,location
http_autoindex autoindex_localtime - http,server,location
http_rewrite break none server,location,if
http_rewrite if none server,location
http_rewrite return none server,location,if
http_rewrite rewrite none server,location,if
http_rewrite rewrite_log - http,server,if-in-server,location,if-in-location
http_rewrite set none server,location,if
http_rewrite uninitialized_variable_warn on http,server,location,if
http_charset charset off http,server,location,ifinlocation
http_charset charset_map no http,server,location
http_charset override_charset off http,server,location,ifinlocation
http_charset source_charset no http,server,location,ifinlocation
http_dav dav_access user:rw http,server,location
http_dav dav_methods off http,server,location
http_dav create_full_put_path off http,server,location
http_main daemon on -
http_main env TZ main
http_main debug_points none -
http_main error_log ${prefix}/logs/error.log -
http_main include none -
http_main lock_file - -
http_main master_process on -
http_main pid - -
http_main ssl_engine - -
http_main timer_resolution none -
http_main user nobody nobody -
http_main worker_cpu_affinity none -
http_main worker_priority on -
http_main worker_processes 1 -
http_main worker_rlimit_core -
http_main worker_rlimit_nofile - -
http_main worker_rlimit_sigpending -
http_main working_directory --prefix -
http_empty_gif empty_gif n/a location
http_fcgi fastcgi_bind none http,server,location
http_fcgi fastcgi_buffer_size 4k/8k http,server,location
http_fcgi fastcgi_buffers 8 4k/8k http,server,location
http_fcgi fastcgi_cache off http,server,location
http_fcgi fastcgi_cache_key none http,server,location
http_fcgi fastcgi_cache_path none http
http_fcgi fastcgi_cache_methods GET HEAD; main,http,location
http_fcgi fastcgi_cache_min_uses 1 http,server,location
http_fcgi fastcgi_cache_use_stale off http,server,location
http_fcgi fastcgi_cache_valid none http,server,location
http_fcgi fastcgi_connect_timeout 60 http,server,location
http_fcgi fastcgi_index none http,server,location
http_fcgi fastcgi_hide_header - http,server,location
http_fcgi fastcgi_ignore_client_abort off http,server,location
http_fcgi fastcgi_ignore_headers - http,server,location
http_fcgi fastcgi_intercept_errors off http,server,location
http_fcgi fastcgi_max_temp_file_size none http,server,location
http_fcgi fastcgi_no_cache none http,server,location
http_fcgi fastcgi_next_upstream error timeout http,server,location
http_fcgi fastcgi_param none http,server,location
http_fcgi fastcgi_pass none location,ifinlocation
http_fcgi fastcgi_pass_header - http,server,location
http_fcgi fastcgi_pass_request_body - http,server,location
http_fcgi fastcgi_pass_request_headers - http,server,location
http_fcgi fastcgi_read_timeout 60 http,server,location
http_fcgi fastcgi_redirect_errors - -
http_fcgi fastcgi_send_timeout 60 http,server,location
http_fcgi fastcgi_split_path_info - location
http_fcgi fastcgi_store off http,server,location
http_fcgi fastcgi_store_access user:rw http,server,location
http_fcgi fastcgi_temp_path fastcgi_temp http,server,location
http_flv_stream flv None location
http_geo geo - http
http_geo_i_p geoip_country - http
http_geo_i_p geoip_city - http
google_perftools google_perftools_profiles none -
http_gzip gzip off http,server,location,iflocation
http_gzip gzip_buffers 4 4k/8k http,server,location
http_gzip gzip_comp_level 1 http,server,location
http_gzip gzip_disable - http,server,location
http_gzip gzip_http_version 1.1 http,server,location
http_gzip gzip_min_length - http,server,location
http_gzip gzip_proxied off http,server,location
http_gzip gzip_types text/html http,server,location
http_gzip gzip_vary off http,server,location
http_gzip_static gzip_static off http,server,location
http_image_filter image_filter none location
http_image_filter image_filter_buffer 1M http,server,location
http_image_filter image_filter_jpeg_quality 75 http,server,location
http_image_filter image_filter_transparency on http,server,location
http_index index - http,server,location
http_upstream ip_hash none upstream
http_upstream server none upstream
http_upstream upstream none http
http_limit_zone limit_zone no http
http_limit_zone limit_conn no http,server,location
http_limit_zone limit_conn_log_level error http,server,location
http_map map none http
http_map map_hash_max_size 2048 http
http_map map_hash_bucket_size 32/64/128 http
http_memcached memcached_pass none http,server,location
http_memcached memcached_connect_timeout 60s http,server,location
http_memcached memcached_read_timeout 60s http,server,location
http_memcached memcached_send_timeout 60s http,server,location
http_memcached memcached_buffer_size - http,server,location
http_memcached memcached_next_upstream error timeout http,server,location
embedded_perl perl no location
embedded_perl perl_modules no http
embedded_perl perl_require no http
embedded_perl perl_set no http
mail_proxy proxy off mail,server
mail_proxy proxy_buffer 4K/8K mail,server
mail_proxy proxy_pass_error_message off mail,server
mail_proxy proxy_timeout 24h mail,server
mail_proxy xclient on mail,server
http_proxy proxy_bind none http,server,location
http_proxy proxy_buffer_size 4k/8k; http,server,location
http_proxy proxy_buffering on; http,server,location
http_proxy proxy_buffers 8 4k/8k; http,server,location
http_proxy proxy_busy_buffers_size - http,server,location,if
http_proxy proxy_cache None http,server,location
http_proxy proxy_cache_bypass off http,server,location
http_proxy proxy_cache_key $scheme$proxy_host$request_uri; http,server,location
http_proxy proxy_cache_methods GET HEAD; http,server,location
http_proxy proxy_cache_min_uses 1; http,server,location
http_proxy proxy_cache_path None http
http_proxy proxy_cache_use_stale off; http,server,location
http_proxy proxy_cache_valid None http,server,location
http_proxy proxy_connect_timeout 60s; http,server,location
http_proxy proxy_headers_hash_bucket_size 64; http,server,location,if
http_proxy proxy_headers_hash_max_size 512; http,server,location,if
http_proxy proxy_hide_header - http,server,location
http_proxy proxy_ignore_client_abort off http,server,location
http_proxy proxy_ignore_headers none http,server,location
http_proxy proxy_intercept_errors off; http,server,location
http_proxy proxy_max_temp_file_size 1G; http,server,location,if
http_proxy proxy_method None http,server,location
http_proxy proxy_next_upstream error timeout; http,server,location
http_proxy proxy_no_cache None http,server,location
http_proxy proxy_pass None location,ifinlocation
http_proxy proxy_pass_header - http,server,location
http_proxy proxy_pass_request_body on; http,server,location
http_proxy proxy_pass_request_headers on; http,server,location
http_proxy proxy_redirect default; http,server,location
http_proxy proxy_read_timeout 60s; http,server,location
http_proxy proxy_send_lowat off; http,server,location,if
http_proxy proxy_send_timeout 60s; http,server,location
http_proxy proxy_set_body none http,server,location,if
http_proxy proxy_set_header Host and Connection http,server,location
http_proxy proxy_ssl_session_reuse on; http,server,location
http_proxy proxy_store off http,server,location
http_proxy proxy_store_access user:rw; http,server,location
http_proxy proxy_temp_file_write_size - http,server,location,if
http_proxy proxy_temp_path $NGX_PREFIX/proxy_temp controlled by --http-proxy-temp-path at ./configure stage http,server,location
http_random_index random_index off location
http_real_ip set_real_ip_from - http,server,location
http_real_ip real_ip_header X-Real-IP http,server,location
http_ssi ssi off http,server,location,ifinlocation
http_ssi ssi_silent_errors off http,server,location
http_ssi ssi_types text/html http,server,location
http_ssi ssi_value_length 256 http,server,location
mail_ssl ssl off mail,server
mail_ssl ssl_certificate cert.pem mail,server
mail_ssl ssl_certificate_key cert.pem mail,server
mail_ssl ssl_ciphers ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP mail,server
mail_ssl ssl_prefer_server_ciphers off mail,server
mail_ssl ssl_protocols SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2 TLSv1.3 mail,server
mail_ssl ssl_session_cache builtin:20480 mail,server
mail_ssl ssl_session_timeout 5m mail,server
mail_ssl starttls off mail,server
http_ssl ssl off http,server
http_ssl ssl_certificate cert.pem http,server
http_ssl ssl_certificate_key cert.pem http,server
http_ssl ssl_client_certificate none http,server
http_ssl ssl_dhparam none http,server
http_ssl ssl_ciphers ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP http,server
http_ssl ssl_crl none http,server
http_ssl ssl_prefer_server_ciphers off http,server
http_ssl ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3 http,server
http_ssl ssl_verify_client off http,server
http_ssl ssl_verify_depth 1 http,server
http_ssl ssl_session_cache off http,server
http_ssl ssl_session_timeout 5m http,server
http_ssl ssl_engine - -
http_stub_status stub_status None location
http_sub sub_filter none http,server,location
http_sub sub_filter_once on http,server,location
http_sub sub_filter_types text/html http,server,location
http_user_id userid off http,server,location
http_user_id userid_domain none http,server,location
http_user_id userid_expires none http,server,location
http_user_id userid_name uid http,server,location
http_user_id userid_p3p none http,server,location
http_user_id userid_path / http,server,location
http_user_id userid_service address http,server,location
http_referer valid_referers no server,location
http_xslt xml_entities no http,server,location
http_xslt xslt_stylesheet no http,server,location
http_xslt xslt_types text/xml http,server,location
core daemon on -
core env TZ main
core debug_points none -
core error_log ${prefix}/logs/error.log -
core include none -
core lock_file - -
core master_process on -
core pid - -
core ssl_engine - -
core timer_resolution none -
core user nobody nobody -
core worker_cpu_affinity none -
core worker_priority on -
core worker_processes 1 -
core worker_rlimit_core -
core worker_rlimit_nofile - -
core worker_rlimit_sigpending -
core working_directory --prefix -