diff --git a/files/angie/lb1.guaranteedstruggle.host.conf b/files/angie/lb1.guaranteedstruggle.host.conf index 6ace0e3..b9e1827 100644 --- a/files/angie/lb1.guaranteedstruggle.host.conf +++ b/files/angie/lb1.guaranteedstruggle.host.conf @@ -13,7 +13,7 @@ # } - +##### 2026-08-12 EXPL! :: конфиг катится только на lb1 т.к на второй уезжает по rsync @@ -131,53 +131,56 @@ server { } -# For WebSocket -map $http_upgrade $connection_upgrade { - default upgrade; - '' close; -} -proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache1:16m max_size=1g inactive=720m use_temp_path=off; -server { - listen 443 ssl; - http2 on; - server_name valavala.ru; +##### 2026-08-12 EXPL! :: не очень удобно перенос делать и т.к пока не юзается то и ладно. если @liyha_LoX вспомнится то врубить +##### бекап валяется в @backups-slut1:/stolen-goods/valavala.ru.zip +valavala.ru.zip +# # # For WebSocket +# # map $http_upgrade $connection_upgrade { +# # default upgrade; +# # '' close; +# # } +# # proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache1:16m max_size=1g inactive=720m use_temp_path=off; +# # server { +# # listen 443 ssl; +# # http2 on; +# # server_name valavala.ru; - ssl_session_timeout 1d; - ssl_session_cache shared:ssl_session_cache:10m; - ssl_session_tickets off; +# # ssl_session_timeout 1d; +# # ssl_session_cache shared:ssl_session_cache:10m; +# # ssl_session_tickets off; - # SSL protocol settings - ssl_protocols TLSv1.2 TLSv1.3; - ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; - ssl_prefer_server_ciphers off; - #####ssl_stapling on; - ####ssl_stapling_verify on; +# # # SSL protocol settings +# # ssl_protocols TLSv1.2 TLSv1.3; +# # ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; +# # ssl_prefer_server_ciphers off; +# # #####ssl_stapling on; +# # ####ssl_stapling_verify on; - location / { - proxy_pass http://192.168.0.55:3033/; +# # location / { +# # proxy_pass http://192.168.0.55:3033/; - proxy_set_header Host $host; - proxy_http_version 1.1; - proxy_redirect off; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; +# # proxy_set_header Host $host; +# # proxy_http_version 1.1; +# # proxy_redirect off; +# # proxy_set_header X-Real-IP $remote_addr; +# # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; +# # proxy_set_header X-Forwarded-Proto $scheme; - # For WebSocket - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection $connection_upgrade; +# # # For WebSocket +# # proxy_set_header Upgrade $http_upgrade; +# # proxy_set_header Connection $connection_upgrade; - # Cache settings - proxy_cache cache1; - proxy_cache_lock on; - proxy_cache_use_stale updating; - proxy_force_ranges on; - add_header X-Cache $upstream_cache_status; - } - ssl_certificate /etc/angie/ssl/valavala.ru/cert.pem; - ssl_certificate_key /etc/angie/ssl/valavala.ru/key.pem; -} +# # # Cache settings +# # proxy_cache cache1; +# # proxy_cache_lock on; +# # proxy_cache_use_stale updating; +# # proxy_force_ranges on; +# # add_header X-Cache $upstream_cache_status; +# # } +# # ssl_certificate /etc/angie/ssl/valavala.ru/cert.pem; +# # ssl_certificate_key /etc/angie/ssl/valavala.ru/key.pem; +# # } server {