danwin1210/mail-hosting
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Clean nginx config

Browse Source
This commit is contained in:
Daniel Winzen
2024-06-06 11:26:19 +02:00
parent 14d6e21223
commit c79682eb0b
4 changed files with 11 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files

61
etc_clearnet_proxy/nginx/nginx.conf
View File

@ -66,18 +66,10 @@ http {
resolver 127.0.0.1 [::1];
resolver_timeout 2s;
root /var/www/html;
proxy_cache_path /var/lib/nginx/cache levels=2 keys_zone=cache:10m inactive=30d max_size=1g;
proxy_cache_revalidate on;
proxy_cache_use_stale http_503 timeout updating error;
proxy_no_cache $http_pragma $http_authorization;
proxy_cache_bypass $cookie_nocache $arg_nocache;
map $http_upgrade $connection_upgrade {
default upgrade;
'' '';
}
proxy_cache_lock_timeout 2m;
proxy_cache_lock_age 2m;
proxy_cache cache;
proxy_http_version 1.1;
proxy_buffer_size 8k;
proxy_buffering on;
@ -88,8 +80,6 @@ http {
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_ignore_client_abort on;
proxy_cache_key $server_name$request_method$host$request_uri;
proxy_read_timeout 3600; #wait up to 60 minutes for e.g. database import
##
# Gzip Settings
@ -127,15 +117,10 @@ stream {
server {
listen [::]:25 fastopen=100 ipv6only=off;
proxy_pass smtp_backend_servers;
deny 51.254.78.246;
}
server {
listen [::]:587 fastopen=100 ipv6only=off;
proxy_pass smtp_auth_backend_servers;
deny 49.70.67.204;
deny 87.246.7.212;
deny 37.49.225.155;
deny 103.151.123.103;
}
server {
listen [::]:465 fastopen=100 ipv6only=off;
@ -167,93 +152,59 @@ stream {
#xmpp
server {
listen [::]:5269 fastopen=100 ipv6only=off;
proxy_pass 10.9.0.3:5269;
proxy_pass 10.9.0.2:5269;
}
server {
listen [::]:5000 fastopen=100 ipv6only=off;
proxy_pass 10.9.0.3:5000;
proxy_pass 10.9.0.2:5000;
}
server {
listen [::]:5222 fastopen=100 ipv6only=off;
proxy_pass 10.9.0.3:5222;
proxy_pass 10.9.0.2:5222;
}
server {
listen [::]:5223 fastopen=100 ipv6only=off;
proxy_pass 10.9.0.3:5223;
proxy_pass 10.9.0.2:5223;
}
server {
listen [::]:5280 fastopen=100 ipv6only=off;
proxy_pass 10.9.0.3:5280;
proxy_pass 10.9.0.2:5280;
}
server {
listen [::]:5281 fastopen=100 ipv6only=off;
proxy_pass 10.9.0.3:5281;
proxy_pass 10.9.0.2:5281;
}
#https
server {
listen [::]:443 fastopen=100 ipv6only=off;
# limit_conn addr 2;
# proxy_upload_rate 4k;
proxy_protocol on;
proxy_pass https_backend_servers;
}
#upstream servers
upstream https_backend_servers {
server 10.9.0.2:443;
server 10.9.0.3:443;
server 10.9.0.4:443;
server 10.9.0.5:443;
}
upstream imaps_backend_servers {
server 10.9.0.2:993;
server 10.9.0.3:993;
server 10.9.0.4:993;
server 10.9.0.5:993;
}
upstream imap_backend_servers {
server 10.9.0.2:143;
server 10.9.0.3:143;
server 10.9.0.4:143;
server 10.9.0.5:143;
}
upstream pop3s_backend_servers {
server 10.9.0.2:995;
server 10.9.0.3:995;
server 10.9.0.4:995;
server 10.9.0.5:995;
}
upstream pop3_backend_servers {
server 10.9.0.2:110;
server 10.9.0.3:110;
server 10.9.0.4:110;
server 10.9.0.5:110;
}
upstream dns_backend_server {
server [::1]:53;
server 127.0.0.1:53;
}
upstream smtp_backend_servers {
server 10.9.0.2:25;
server 10.9.0.3:25;
server 10.9.0.4:25;
server 10.9.0.5:25;
}
upstream smtp_auth_backend_servers {
server 10.9.0.2:587;
server 10.9.0.3:587;
server 10.9.0.4:587;
server 10.9.0.5:587;
}
upstream smtps_backend_servers {
server 10.9.0.2:465;
server 10.9.0.3:465;
server 10.9.0.4:465;
server 10.9.0.5:465;
}
upstream mysql_backend_servers {
server 10.9.0.2:3306;
server 10.9.0.3:3306;
server 10.9.0.4:3306;
server 10.9.0.5:3306;
}
}