Ansible_workstation/files/nginx.conf

52 lines
2.1 KiB
Nginx Configuration File
Raw Normal View History

worker_processes 1;
events {
worker_connections 1024;
}
http {
# Use a custom log format that will show response times and cache status
log_format archmirror '$remote_addr - $upstream_cache_status [$time_local] $request_method $host$request_uri $server_protocol $status $body_bytes_sent $request_time $upstream_response_time';
# Configure the cache directory, size and keys
proxy_cache_path /srv/http/pacman-cache
levels=1:2 keys_zone=archmirror:60m
inactive=365d use_temp_path=off max_size=3g;
server {
listen 8080;
server_name cache.local;
access_log /var/log/nginx/archmirror.access.log archmirror;
error_log /var/log/nginx/archmirror.error.log;
# Force proxy to use TLS for upstream server requests
proxy_ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
# Use previously negotiated connection parameters
proxy_ssl_session_reuse on;
# Enables revalidation of expired cache items using conditional requests with the "If-Modified-Since" and "If-None-Match" header fields.
proxy_cache_revalidate on;
# Only one request at a time will be allowed to populate a new cache element
proxy_cache_lock on;
# Cache any responses for 1 minute by default, can be overridden by more specific response codes
proxy_cache_valid any 1m;
# Keep connections to upstream server open
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_read_timeout 300;
proxy_connect_timeout 300;
location / {
proxy_pass http://mirror.archlinux.ikoula.com;
proxy_cache archmirror; # This directive should match the keys_zone option
proxy_cache_valid 200 5m;
proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;
# Add some cache status headers for debugging purposes, you can remove these lines if you want
add_header X-Upstream-Status $upstream_status;
add_header X-Cache-Status $upstream_cache_status;
}
}
}