initial commit - skeleton setup

2019-10-16 23:44:47 -06:00
parent 3536434902
commit 141b932a1c
17 changed files with 268 additions and 0 deletions
@@ -0,0 +1,4 @@
+client_body_buffer_size 16k;
+client_max_body_size 10M;
+client_header_buffer_size 1k;
+large_client_header_buffers 4 8k;
@@ -0,0 +1,14 @@
+gzip on;
+gzip_vary on;
+gzip_comp_level 4;
+gzip_min_length 256;
+gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
+gzip_types application/atom+xml application/javascript application/json
+    application/ld+json application/manifest+json application/rss+xml
+    application/vnd.geo+json application/vnd.ms-fontobject
+    application/x-font-ttf application/x-web-app-manifest+json
+    application/xhtml+xml application/xml font/opentype image/bmp
+    image/svg+xml image/x-icon text/cache-manifest text/css text/plain
+    text/vcard text/vnd.rim.location.xloc text/vtt text/x-component
+    text/x-cross-domain-policy;
+gzip_disable "MSIE [1-6]\.";
@@ -0,0 +1,12 @@
+add_header Feature-Policy "geolocation 'self'";
+
+add_header Referrer-Policy "strict-origin" always;
+
+add_header X-Content-Type-Options "nosniff" always;
+add_header X-Download-Options noopen;
+add_header X-Frame-Options DENY;
+add_header X-Permitted-Cross-Domain-Policies none;
+add_header X-UA-Compatible "IE=edge";
+add_header X-XSS-Protection "1; mode=block" always;
+
+add_header X-Robots-Tag none;
@@ -0,0 +1,7 @@
+- Place all your configuration customization files in this directory
+    - feel free to edit the included recommended files
+    - files here override container settings including nginx.conf
+- Files here are placed in the HTTP configuration context
+- ONLY files that end with '.conf' will be processed!
+    - if you want to keep a file for reference or disable it temporarily, 
+        simply change the extension.  I like using '.conf.disabled'.
@@ -0,0 +1,4 @@
+sendfile on;
+sendfile_max_chunk 1m;
+tcp_nopush on;
+tcp_nodelay on;
@@ -0,0 +1,8 @@
+client_body_timeout 15s;
+client_header_timeout 15s;
+send_timeout 15s;
+keepalive_timeout 65s;
+reset_timedout_connection on;
+proxy_connect_timeout 30s;
+proxy_read_timeout 60s;
+proxy_send_timeout 60s;