Allow prometheus collectors write access to /var/log

[chef.git] / cookbooks / imagery / templates / default / nginx_default.conf.erb
diff --git a/cookbooks/imagery/templates/default/nginx_default.conf.erb b/cookbooks/imagery/templates/default/nginx_default.conf.erb

index 4e003a15700e2900f66ea79c23816ec9abb20632..cb629d59bda5f5e09d3ecbd2e7b81860aa575f5f 100644 (file)
--- a/cookbooks/imagery/templates/default/nginx_default.conf.erb
+++ b/cookbooks/imagery/templates/default/nginx_default.conf.erb
@@ -1,6 +1,9 @@
  server {
-    listen [::]:80 fastopen=1024 default_server;
-    listen *:80 fastopen=1024 default_server;
+    listen 80 deferred backlog=16384 reuseport default_server;
+    listen 443 ssl deferred backlog=16384 reuseport http2; # No default_server here unless certificate specified here too.
+    listen [::]:80 deferred backlog=16384 reuseport default_server;
+    listen [::]:443 ssl deferred backlog=16384 reuseport http2; # No default_server here unless certificate specified here too.
+
      server_name  _;
      default_type text/html;
      return 404 '<html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>default imagery server vhost. Please use correct URL.</center></body></html>';