mercury
131 lines
3.3 KiB
Plaintext
131 lines
3.3 KiB
Plaintext
user nginx;
|
|
worker_processes auto;
|
|
|
|
error_log /logs/nginx_error;
|
|
pid /var/run/nginx.pid;
|
|
|
|
events {
|
|
worker_connections 1024;
|
|
}
|
|
|
|
http {
|
|
include include.conf;
|
|
include /etc/nginx/mime.types;
|
|
default_type application/octet-stream;
|
|
|
|
# Proxy Cache storage - so we can cache the DoH response from the upstream
|
|
proxy_cache_path /var/cache/nginx/doh_cache levels=1:2 keys_zone=doh_cache:10m;
|
|
|
|
server {
|
|
listen 80 default_server;
|
|
listen 443 ssl http2 default_server;
|
|
ssl_certificate /certs/self_public;
|
|
ssl_certificate_key /certs/self_private;
|
|
|
|
access_log /logs/nginx_default_access;
|
|
|
|
location / {
|
|
return 444;
|
|
}
|
|
location /adguard/ {
|
|
access_log /logs/nginx_adguard_access;
|
|
proxy_pass http://ad:80/;
|
|
proxy_redirect / /adguard/;
|
|
proxy_cookie_path / /adguard/;
|
|
}
|
|
location /pac {
|
|
access_log /logs/nginx_pac_access;
|
|
proxy_pass http://php;
|
|
}
|
|
location /tlgrm {
|
|
access_log /logs/nginx_tlgrm_access;
|
|
proxy_pass http://php;
|
|
}
|
|
location /v2ray {
|
|
access_log /logs/nginx_v2ray_access;
|
|
proxy_redirect off;
|
|
proxy_buffering off;
|
|
proxy_http_version 1.1;
|
|
proxy_pass http://ss:8388/;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
}
|
|
location ~\.well-known {
|
|
access_log /logs/nginx_certbot_access;
|
|
root /certs/;
|
|
try_files $uri =404;
|
|
}
|
|
}
|
|
|
|
#~
|
|
|
|
#-domain
|
|
# server {
|
|
# listen 80;
|
|
# server_name ;
|
|
#-domain
|
|
#-ssl
|
|
# listen 443 ssl http2;
|
|
# ssl_certificate /certs/cert_public;
|
|
# ssl_certificate_key /certs/cert_private;
|
|
#-ssl
|
|
|
|
#-domain
|
|
# access_log /logs/nginx_domain_access;
|
|
|
|
# location / {
|
|
# return 444;
|
|
# }
|
|
# location /adguard/ {
|
|
# access_log /logs/nginx_adguard_access;
|
|
# proxy_pass http://ad:80/;
|
|
# proxy_redirect / /adguard/;
|
|
# proxy_cookie_path / /adguard/;
|
|
# }
|
|
# location /pac {
|
|
# access_log /logs/nginx_pac_access;
|
|
# proxy_pass http://php;
|
|
# }
|
|
# location ~\.well-known {
|
|
# access_log /logs/nginx_certbot_access;
|
|
# root /certs/;
|
|
# try_files $uri =404;
|
|
# }
|
|
# location /v2ray {
|
|
# access_log /logs/nginx_v2ray_access;
|
|
# proxy_redirect off;
|
|
# proxy_buffering off;
|
|
# proxy_http_version 1.1;
|
|
# proxy_pass http://ss:8388/;
|
|
# proxy_set_header Host $http_host;
|
|
# proxy_set_header Upgrade $http_upgrade;
|
|
# proxy_set_header Connection "upgrade";
|
|
# }
|
|
#-domain
|
|
#-ssl
|
|
# # The DoH server block
|
|
# location /dns-query {
|
|
# access_log /logs/nginx_doh_access;
|
|
# # Proxy HTTP/1.1, clear the connection header to enable Keep-Alive
|
|
# proxy_http_version 1.1;
|
|
# proxy_set_header Connection "";
|
|
# proxy_set_header Host $host;
|
|
# proxy_set_header X-Real-IP $remote_addr;
|
|
# proxy_set_header X-Forwarded-Proto https;
|
|
# proxy_set_header X-Forwarded-For $remote_addr;
|
|
# proxy_set_header X-Forwarded-Host $remote_addr;
|
|
|
|
# # Enable Cache, and set the cache_key to include the request_body
|
|
# proxy_cache doh_cache;
|
|
# proxy_cache_key $scheme$proxy_host$uri$is_args$args$request_body;
|
|
|
|
# # proxy pass to the dohloop upstream
|
|
# proxy_pass https://ad/dns-query;
|
|
# }
|
|
#-ssl
|
|
#-domain
|
|
# }
|
|
#-domain
|
|
}
|