X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/241a2bab0581e189ae2ece711e46b8b081a74ce0..a7ef494e3683d06f375b2b5530de97e0a91f2c3c:/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb

diff --git a/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb b/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb
index 7f01c3fc8..a22391255 100644
--- a/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb
+++ b/cookbooks/tilecache/templates/default/nginx_tile_ssl.conf.erb
@@ -13,7 +13,7 @@ upstream tile_cache_backend {
 }
 
 server {
-    listen       443 ssl default_server;
+    listen       443 ssl fastopen=2048 http2 default_server;
     server_name  localhost;
 
     proxy_buffers 8 64k;
@@ -35,5 +35,19 @@ server {
       proxy_set_header X-Forwarded-For $remote_addr;
       proxy_http_version 1.1;
       proxy_set_header Connection "";
+
+      proxy_connect_timeout 5s;
+
+      # Do not pass cookies to backend.
+      proxy_set_header Cookie "";
+      # Do not pass Accept-Encoding to backend.
+      proxy_set_header Accept-Encoding "";
+
+      # Do not allow setting cookies from cached pages.
+      proxy_ignore_headers Set-Cookie;
+      proxy_hide_header Set-Cookie;
+
+      # Slow traffic slightly
+      limit_rate 24576;
     }
 }