hogweed1/ansible-repo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

some preps to make lbs.
All checks were successful
Gitea Actions Demo / Explore-Gitea-Actions (push) Successful in 0s
Details

Browse Source
This commit is contained in:
hogweed1
2026-08-12 01:09:13 +10:00
parent 4c0800e803
commit 7dcdf4ef8f
1 changed files with 44 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

85
files/angie/lb1.guaranteedstruggle.host.conf
View File

@@ -13,7 +13,7 @@
# } # }
##### 2026-08-12 EXPL! :: конфиг катится только на lb1 т.к на второй уезжает по rsync
@@ -131,53 +131,56 @@ server {
} }
# For WebSocket ##### 2026-08-12 EXPL! :: не очень удобно перенос делать и т.к пока не юзается то и ладно. если @liyha_LoX вспомнится то врубить
map $http_upgrade $connection_upgrade { ##### бекап валяется в @backups-slut1:/stolen-goods/valavala.ru.zip
default upgrade; valavala.ru.zip
'' close; # # # For WebSocket
} # # map $http_upgrade $connection_upgrade {
proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache1:16m max_size=1g inactive=720m use_temp_path=off; # # default upgrade;
server { # # '' close;
listen 443 ssl; # # }
http2 on; # # proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache1:16m max_size=1g inactive=720m use_temp_path=off;
server_name valavala.ru; # # server {
# # listen 443 ssl;
# # http2 on;
# # server_name valavala.ru;
ssl_session_timeout 1d; # # ssl_session_timeout 1d;
ssl_session_cache shared:ssl_session_cache:10m; # # ssl_session_cache shared:ssl_session_cache:10m;
ssl_session_tickets off; # # ssl_session_tickets off;
# SSL protocol settings # # # SSL protocol settings
ssl_protocols TLSv1.2 TLSv1.3; # # ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; # # ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
ssl_prefer_server_ciphers off; # # ssl_prefer_server_ciphers off;
#####ssl_stapling on; # # #####ssl_stapling on;
####ssl_stapling_verify on; # # ####ssl_stapling_verify on;
location / { # # location / {
proxy_pass http://192.168.0.55:3033/; # # proxy_pass http://192.168.0.55:3033/;
proxy_set_header Host $host; # # proxy_set_header Host $host;
proxy_http_version 1.1; # # proxy_http_version 1.1;
proxy_redirect off; # # proxy_redirect off;
proxy_set_header X-Real-IP $remote_addr; # # proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; # # proxy_set_header X-Forwarded-Proto $scheme;
# For WebSocket # # # For WebSocket
proxy_set_header Upgrade $http_upgrade; # # proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade; # # proxy_set_header Connection $connection_upgrade;
# Cache settings # # # Cache settings
proxy_cache cache1; # # proxy_cache cache1;
proxy_cache_lock on; # # proxy_cache_lock on;
proxy_cache_use_stale updating; # # proxy_cache_use_stale updating;
proxy_force_ranges on; # # proxy_force_ranges on;
add_header X-Cache $upstream_cache_status; # # add_header X-Cache $upstream_cache_status;
} # # }
ssl_certificate /etc/angie/ssl/valavala.ru/cert.pem; # # ssl_certificate /etc/angie/ssl/valavala.ru/cert.pem;
ssl_certificate_key /etc/angie/ssl/valavala.ru/key.pem; # # ssl_certificate_key /etc/angie/ssl/valavala.ru/key.pem;
} # # }
server { server {