66 lines
1.1 KiB
Markdown
66 lines
1.1 KiB
Markdown
# Nginx
|
|
|
|
## Supported
|
|
|
|
Nginx: 1.10.3
|
|
Debian: Stretch
|
|
|
|
Other versions might work but are not tested.
|
|
|
|
## Parameters and defaults
|
|
|
|
DNS resolver have to be defined in the `resolver` array. Defaults:
|
|
|
|
```
|
|
resolver:
|
|
- 8.8.8.8
|
|
- 8.8.4.4
|
|
```
|
|
|
|
All other configuration is to be placed inside the `nginx` dict.
|
|
|
|
```
|
|
# name: *upstreamconfig*, see below for definition
|
|
upstreams: {}
|
|
|
|
# name: *vhostconfig*, see below for definition
|
|
vhosts: {}
|
|
|
|
# force all traffic on ssl, except letsencrypt challenges
|
|
force_ssl: True
|
|
|
|
```
|
|
|
|
** upstreamconfig **:
|
|
```
|
|
# array of upstream servers
|
|
server:
|
|
-
|
|
# can be "unix:/path/to/socket" or "https://foo.bar" or "http://foo.bar"
|
|
address: *mandatory*
|
|
|
|
# monitor dns for changes
|
|
resolve: true
|
|
```
|
|
|
|
** vhosts **:
|
|
```
|
|
# Array of server names, example: foo.bar
|
|
servername: []
|
|
|
|
# set this server as default
|
|
default_server: False
|
|
|
|
listen:
|
|
ssl: True
|
|
ssl_port: 443
|
|
nossl: False
|
|
nossl_port: 80
|
|
|
|
# Example: https://upstream; If set to none no reverse proxy will be set up.
|
|
backend: None
|
|
|
|
# Set ssl certs to letsencrypt paths and enable letsencrypt for this vhost
|
|
letsencrypt: True
|
|
```
|
|
|