Created
April 20, 2012 10:04
-
-
Save martinciu/2427506 to your computer and use it in GitHub Desktop.
nginx.conf for dev rails ssl
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#user nobody; | |
worker_processes 10; | |
error_log logs/error.log; | |
#error_log logs/error.log notice; | |
#error_log logs/error.log info; | |
#pid logs/nginx.pid; | |
events { | |
worker_connections 1024; | |
} | |
http { | |
include mime.types; | |
default_type application/octet-stream; | |
log_format main '$remote_addr - $remote_user [$time_local] "$request" ' | |
'$status $body_bytes_sent "$http_referer" ' | |
'"$http_user_agent" "$http_x_forwarded_for"'; | |
access_log logs/access.log main; | |
sendfile on; | |
#tcp_nopush on; | |
#keepalive_timeout 0; | |
keepalive_timeout 65; | |
#gzip on; | |
upstream rails { | |
server 127.0.0.1:3000; | |
} | |
server { | |
listen 80; | |
server_name dev.jobandtalent.com, dev.jobandtalent.co.uk, dev.jobandtalent.es; | |
location / { | |
proxy_pass http://rails; | |
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503; | |
proxy_set_header Host $host; | |
proxy_set_header X-Real-IP $remote_addr; | |
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; | |
proxy_redirect off; | |
} | |
} | |
server { | |
listen 443 ssl; | |
server_name dev.jobandtalent.com; | |
ssl on; | |
ssl_certificate ssl/dev.jobandtalent.com.crt; | |
ssl_certificate_key ssl/dev.jobandtalent.com.key; | |
ssl_session_timeout 60m; | |
ssl_protocols SSLv2 SSLv3 TLSv1; | |
ssl_ciphers HIGH:!aNULL:!MD5; | |
ssl_prefer_server_ciphers on; | |
location / { | |
proxy_pass http://rails; | |
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503; | |
proxy_set_header Host $host; | |
proxy_set_header X-Real-IP $remote_addr; | |
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; | |
proxy_set_header X-Forwarded-Proto https; | |
proxy_redirect off; | |
} | |
} | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment