some preps to make lbs.

2026-08-12 01:09:13 +10:00
parent 4c0800e803
commit 7dcdf4ef8f
1 changed files with 44 additions and 41 deletions
--- a/files/angie/lb1.guaranteedstruggle.host.conf
+++ b/files/angie/lb1.guaranteedstruggle.host.conf
@@ -13,7 +13,7 @@
 # }
 
  
-  
+##### 2026-08-12 EXPL! :: конфиг катится только на lb1 т.к на второй уезжает по rsync



@@ -131,53 +131,56 @@ server {
 }


-# For WebSocket
-map $http_upgrade $connection_upgrade {
-    default upgrade;
-    ''      close;
-} 
-proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache1:16m max_size=1g inactive=720m use_temp_path=off;
-server {
-    listen 443 ssl;
-    http2 on;
-    server_name valavala.ru; 
+##### 2026-08-12 EXPL! :: не очень удобно перенос делать и т.к пока не юзается то и ладно. если @liyha_LoX вспомнится то врубить
+#####                                                                                      бекап валяется в @backups-slut1:/stolen-goods/valavala.ru.zip
+valavala.ru.zip
+# # # For WebSocket
+# # map $http_upgrade $connection_upgrade {
+# #     default upgrade;
+# #     ''      close;
+# # } 
+# # proxy_cache_path /tmp/nginx_cache levels=1:2 keys_zone=cache1:16m max_size=1g inactive=720m use_temp_path=off;
+# # server {
+# #     listen 443 ssl;
+# #     http2 on;
+# #     server_name valavala.ru; 

-    ssl_session_timeout 1d;
-    ssl_session_cache shared:ssl_session_cache:10m;
-    ssl_session_tickets off;
+# #     ssl_session_timeout 1d;
+# #     ssl_session_cache shared:ssl_session_cache:10m;
+# #     ssl_session_tickets off;

-    # SSL protocol settings
-    ssl_protocols TLSv1.2 TLSv1.3;
-    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
-    ssl_prefer_server_ciphers off;
-    #####ssl_stapling on;
-    ####ssl_stapling_verify on;
+# #     # SSL protocol settings
+# #     ssl_protocols TLSv1.2 TLSv1.3;
+# #     ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+# #     ssl_prefer_server_ciphers off;
+# #     #####ssl_stapling on;
+# #     ####ssl_stapling_verify on;


-    location / { 
-      proxy_pass http://192.168.0.55:3033/;
+# #     location / { 
+# #       proxy_pass http://192.168.0.55:3033/;

-      proxy_set_header Host $host;
-      proxy_http_version 1.1;
-      proxy_redirect off;
-      proxy_set_header X-Real-IP $remote_addr;
-      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-      proxy_set_header X-Forwarded-Proto $scheme;
+# #       proxy_set_header Host $host;
+# #       proxy_http_version 1.1;
+# #       proxy_redirect off;
+# #       proxy_set_header X-Real-IP $remote_addr;
+# #       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+# #       proxy_set_header X-Forwarded-Proto $scheme;

-      # For WebSocket
-      proxy_set_header Upgrade $http_upgrade;
-      proxy_set_header Connection $connection_upgrade;
+# #       # For WebSocket
+# #       proxy_set_header Upgrade $http_upgrade;
+# #       proxy_set_header Connection $connection_upgrade;

-      # Cache settings
-      proxy_cache cache1;
-      proxy_cache_lock on;
-      proxy_cache_use_stale updating;
-      proxy_force_ranges on;
-      add_header X-Cache $upstream_cache_status;
-    }
-    ssl_certificate /etc/angie/ssl/valavala.ru/cert.pem;
-    ssl_certificate_key /etc/angie/ssl/valavala.ru/key.pem;
-}
+# #       # Cache settings
+# #       proxy_cache cache1;
+# #       proxy_cache_lock on;
+# #       proxy_cache_use_stale updating;
+# #       proxy_force_ranges on;
+# #       add_header X-Cache $upstream_cache_status;
+# #     }
+# #     ssl_certificate /etc/angie/ssl/valavala.ru/cert.pem;
+# #     ssl_certificate_key /etc/angie/ssl/valavala.ru/key.pem;
+# # }
 

 server {