Add alert for DNSSEC validation failures

[chef.git] / cookbooks / imagery / templates / default / nginx_imagery.conf.erb

diff --git a/cookbooks/imagery/templates/default/nginx_imagery.conf.erb b/cookbooks/imagery/templates/default/nginx_imagery.conf.erb
index 497cc1f53ea95ef97cb8de4b64b26f006e75a34b..42ae9ac014b3a10b609adec40e0f1504fdb8e0cb 100644 (file)
--- a/cookbooks/imagery/templates/default/nginx_imagery.conf.erb
+++ b/cookbooks/imagery/templates/default/nginx_imagery.conf.erb
@@ -8,10 +8,9 @@ server {
 }
 
 <% if @uses_tiler -%>
-upstream tiler_backend {
-    server 127.0.0.1:8080;
-
-    keepalive 32;
+upstream <%= @name %>_tiler_backend {
+    server unix:/srv/imagery/sockets/titiler.sock max_fails=0;
+    server unix:/srv/./imagery/sockets/titiler.sock max_fails=0;
 }
 <% else -%>
 upstream <%= @name %>_fastcgi {
@@ -27,6 +26,9 @@ server {
     listen [::]:443 ssl http2;
     server_name <%= @name %> a.<%= @name %> b.<%= @name %> c.<%= @name %><% @aliases.each do |alias_name| %> <%= alias_name %> a.<%= alias_name %> b.<%= alias_name %> c.<%= alias_name %><%- end -%>;
 
+    http2_max_concurrent_streams 512;
+    keepalive_timeout 30s;
+
     ssl_certificate /etc/ssl/certs/<%= @name %>.pem;
     ssl_certificate_key /etc/ssl/private/<%= @name %>.key;
 <% if node[:ssl][:strict_transport_security] -%>