Add TLS site-default support

This commit is contained in:
Samuel Huang
2024-09-28 18:50:25 +10:00
parent 4e6bd1e3c3
commit 68355bbc9a
5 changed files with 86 additions and 77 deletions

25
nginx-site.tpl Normal file
View File

@@ -0,0 +1,25 @@
server {
listen NGPORT quic;
listen NGPORT ssl NGPROTOCOL;
listen [::]:NGPORT ssl NGPROTOCOL;
http2 on;
server_name NGDOMAIN;
ssl_certificate CERTFILE;
ssl_certificate_key PRVKEYFILE;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
add_header Alt-Svc 'h3=":443"; ma=86400';
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_header_timeout 1071906480m;
keepalive_timeout 1071906480m;
access_log /var/log/nginx/access.log main;
location / {
return 404;
}
#XLOCATION_TAG
}