X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/bc6624fcc809acaf8dcdcf667e43cc5fc9bb1451..226773e8e4b1b7e0141c45e0040fa2cd4141282a:/cookbooks/nginx/templates/default/nginx.conf.erb diff --git a/cookbooks/nginx/templates/default/nginx.conf.erb b/cookbooks/nginx/templates/default/nginx.conf.erb index a16d25812..0d2387b2e 100644 --- a/cookbooks/nginx/templates/default/nginx.conf.erb +++ b/cookbooks/nginx/templates/default/nginx.conf.erb @@ -25,12 +25,12 @@ http { '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; - access_log <%= node[:nginx][:access_log] %> main buffer=32k flush=1m; + access_log <%= node[:nginx][:access_log] %> main buffer=256k flush=1m; <% else -%> access_log off; <% end -%> - keepalive_timeout 30; + keepalive_timeout 20 20; server_tokens off; @@ -47,17 +47,17 @@ http { ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt; ssl_dhparam /etc/ssl/certs/dhparam.pem; - resolver <%= @resolvers.join(" ") %>; + resolver 127.0.0.53 ipv6=off; resolver_timeout 5s; <% if node['nginx']['cache']['fastcgi']['enable'] -%> - fastcgi_cache_path /var/cache/nginx/fastcgi-cache levels=1:2 use_temp_path=off keys_zone=<%= node['nginx']['cache']['fastcgi']['keys_zone'] %> inactive=<%= node['nginx']['cache']['fastcgi']['inactive'] %> max_size=<%= node['nginx']['cache']['fastcgi']['max_size'] %>; + fastcgi_cache_path <%= node['nginx']['cache']['fastcgi']['directory'] %> levels=2:2:2 use_temp_path=off keys_zone=<%= node['nginx']['cache']['fastcgi']['keys_zone'] %> inactive=<%= node['nginx']['cache']['fastcgi']['inactive'] %> max_size=<%= node['nginx']['cache']['fastcgi']['max_size'] %>; <% end -%> <% if node['nginx']['cache']['proxy']['enable'] -%> - proxy_cache_path /var/cache/nginx/proxy-cache levels=1:2 use_temp_path=off keys_zone=<%= node['nginx']['cache']['proxy']['keys_zone'] %> inactive=<%= node['nginx']['cache']['proxy']['inactive'] %> max_size=<%= node['nginx']['cache']['proxy']['max_size'] %>; + proxy_cache_path <%= node['nginx']['cache']['proxy']['directory'] %> levels=2:2:2 use_temp_path=off keys_zone=<%= node['nginx']['cache']['proxy']['keys_zone'] %> inactive=<%= node['nginx']['cache']['proxy']['inactive'] %> max_size=<%= node['nginx']['cache']['proxy']['max_size'] %>; <% end -%> - # Internal site for munin monitoring + # Internal site for stats monitoring server { listen 127.0.0.1:8050; server_name localhost;