@@ -34,17 +34,17 @@ server {
34
34
root /var/www/%s;
35
35
36
36
location / {
37
- # First attempt to serve request as file, then
38
- # as directory, then fall back to displaying 404.
39
- try_files $uri $uri/ =404;
40
- proxy_pass http://websocket_wot_relay;
37
+ # First attempt to serve request as file, then
38
+ # as directory, then fall back to displaying 404.
39
+ try_files $uri $uri/ =404;
40
+ proxy_pass http://websocket_wot_relay;
41
41
proxy_set_header Host $host;
42
- proxy_set_header X-Real-IP $remote_addr;
42
+ proxy_set_header X-Real-IP $remote_addr;
43
43
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
44
44
proxy_set_header X-Forwarded-Proto $scheme;
45
45
proxy_http_version 1.1;
46
46
proxy_set_header Upgrade $http_upgrade;
47
- proxy_set_header Connection $connection_upgrade;
47
+ proxy_set_header Connection $connection_upgrade;
48
48
}
49
49
50
50
#### SSL Configuration ####
@@ -70,7 +70,7 @@ server {
70
70
# Compilation of the top cipher suites 2024:
71
71
# https://ssl-config.mozilla.org/#server=nginx
72
72
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305";
73
-
73
+
74
74
# Perfect Forward Secrecy (PFS) is frequently compromised without this
75
75
ssl_prefer_server_ciphers on;
76
76
@@ -83,7 +83,7 @@ server {
83
83
84
84
# By default, the buffer size is 16k, which corresponds to minimal overhead when sending big responses.
85
85
# To minimize Time To First Byte it may be beneficial to use smaller values
86
- ssl_buffer_size 8k;
86
+ ssl_buffer_size 8k;
87
87
88
88
# OCSP stapling
89
89
ssl_stapling on;
0 commit comments