Create nginx.conf.template

Author: damalis

webserver/templates/nginx.conf.template

@@ -0,0 +1,118 @@
+upstream docker_drupal {
+	server	drupal:9000;
+}
+
+upstream docker_varnish  {
+	server	varnish:8080;
+}
+
+map $scheme $proxy_x_forwarded_ssl {
+	default off;
+	https on;
+}
+
+server {
+	listen ${NGINX_PORT} default_server;
+	listen [::]:${NGINX_PORT} ipv6only=on default_server;
+	#
+	server_name ${NGINX_HOST} www.${NGINX_HOST};
+	#
+	location ~ ^/.well-known/acme-challenge/ {
+		root /tmp/acme-challenge;
+	}
+	#
+	#location / {
+		#port_in_redirect off;
+		#return 301 https://$host$request_uri;
+	#}
+}
+
+server {
+	#listen 443 ssl http2;
+	#listen [::]:443 ipv6only=on ssl http2;
+	#
+	server_name ${NGINX_HOST} www.${NGINX_HOST};
+	#
+	#ssl_certificate /etc/letsencrypt/live/${NGINX_HOST}/fullchain.pem;
+	#ssl_certificate_key /etc/letsencrypt/live/${NGINX_HOST}/privkey.pem;
+	#ssl_trusted_certificate /etc/letsencrypt/live/${NGINX_HOST}/chain.pem;
+	#ssl_dhparam /etc/letsencrypt/ssl-dhparam.pem;
+	include /etc/letsencrypt/options-ssl-nginx.conf;	
+	
+	location / {		
+		proxy_pass	http://docker_varnish;		
+		proxy_set_header	X-Real-IP	$remote_addr;
+		proxy_set_header	X-Forwarded-For	$proxy_add_x_forwarded_for;
+		proxy_set_header	X-Forwarded-Proto	$scheme;		
+		proxy_set_header	Host	$host;
+		proxy_set_header	X-Forwarded-Host	$host;
+		proxy_set_header	X-Forwarded-Port	$server_port;	
+		proxy_set_header	Upgrade	$http_upgrade;
+		proxy_set_header	Connection	"Upgrade";
+		proxy_set_header	X-Forwarded-Ssl	$proxy_x_forwarded_ssl;		
+			
+		#
+		proxy_redirect	off;
+		proxy_buffering	on;
+		proxy_buffer_size	128k;
+		proxy_buffers	100	8k;
+		proxy_connect_timeout	90;
+		proxy_send_timeout	90;
+		proxy_read_timeout	90;
+		proxy_request_buffering	off;
+		#
+		# Mitigate httpoxy attack
+		proxy_set_header Proxy "";        
+	}	
+	#
+	# deny access to .htaccess vb. files, if Apache's document root
+	location ~/\. {
+		deny all;     
+		log_not_found off;
+	}
+	#
+	location ~ /.well-known {
+		allow all;
+	}
+	#
+	location = /favicon.ico {
+		log_not_found off;
+		access_log off;
+	}
+	#
+	location = /robots.txt {
+		allow all;
+		log_not_found off;
+		access_log off;
+	}
+	#
+	access_log off;
+	error_log  /var/log/nginx/${NGINX_HOST}-443.error.log error;
+}
+
+server {
+	#listen 81;
+	#listen [::]:81 ipv6only=on;
+	#
+	server_name ${NGINX_HOST} www.${NGINX_HOST};
+	#
+	
+	root /var/www/html;
+	index index.php;
+	
+	location / {
+		try_files $uri /index.php$is_args$args;
+	}
+	
+	location ~ \.php$ {
+		#NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
+		include	fastcgi_params;
+		fastcgi_index	index.php;
+		fastcgi_pass	docker_drupal;
+		#The following parameter can be also included in fastcgi_params file
+		fastcgi_param	SCRIPT_FILENAME	$document_root$fastcgi_script_name;
+	}
+	#
+	access_log off;
+	error_log  /var/log/nginx/${NGINX_HOST}-81.error.log error;
+}