nginx-dist.conf

# The production /etc/nginx/nginx.conf file for blimp-cockpit
#
# - it is copied over from app/ to dist/ automatically during grunt build


# This was the content of the blimp_cockpit_1 /etc/nginx/nginx.conf found in my
# working blimp (probably inherited from the nginx-extras Debian package
# installed in our
# [ARM nginx Docker image](https://github.com/cloudfleet/blimp-nginx-armhf))

# -------------START---------------

# user www-data;
# worker_processes 4;
# pid /run/nginx.pid;

# events {
# 	worker_connections 768;
# 	# multi_accept on;
# }

# http {

# 	##
# 	# Basic Settings
# 	##

# 	sendfile on;
# 	tcp_nopush on;
# 	tcp_nodelay on;
# 	keepalive_timeout 65;
# 	types_hash_max_size 2048;
# 	# server_tokens off;

# 	# server_names_hash_bucket_size 64;
# 	# server_name_in_redirect off;

# 	include /etc/nginx/mime.types;
# 	default_type application/octet-stream;

# 	##
# 	# SSL Settings
# 	##

# 	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
# 	ssl_prefer_server_ciphers on;

# 	##
# 	# Logging Settings
# 	##

# 	access_log /var/log/nginx/access.log;
# 	error_log /var/log/nginx/error.log;

# 	##
# 	# Gzip Settings
# 	##

# 	gzip on;
# 	gzip_disable "msie6";

# 	# gzip_vary on;
# 	# gzip_proxied any;
# 	# gzip_comp_level 6;
# 	# gzip_buffers 16 8k;
# 	# gzip_http_version 1.1;
# 	# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

# 	##
# 	# Virtual Host Configs
# 	##

# 	include /etc/nginx/conf.d/*.conf;
# 	include /etc/nginx/sites-enabled/*;
# }


# #mail {
# #	# See sample authentication script at:
# #	# http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
# #
# #	# auth_http localhost/auth.php;
# #	# pop3_capabilities "TOP" "USER";
# #	# imap_capabilities "IMAP4rev1" "UIDPLUS";
# #
# #	server {
# #		listen     localhost:110;
# #		protocol   pop3;
# #		proxy      on;
# #	}
# #
# #	server {
# #		listen     localhost:143;
# #		protocol   imap;
# #		proxy      on;
# #	}
# #}

# -------------END---------------


# This was the content of the cockpit container when running
# from my laptop using docker-compose.dist.yml
# (probably inherited from the
# [Docker Hub nginx image](https://hub.docker.com/_/nginx/))
#
# Updated to match the recommendations at https://github.com/h5bp/server-configs-nginx

# -------------START---------------

# user, pid copied from the working container
user www-data;
pid /run/nginx.pid;


# The maximum number of connections for Nginx is calculated by:
# max_clients = worker_processes * worker_connections
# worker_processes  1;
worker_processes auto;

# Maximum open file descriptors per process;
# should be > worker_connections.
worker_rlimit_nofile 8192;

events {
    worker_connections  1024;
}

# Default error log file
# (this is only used when you don't override error_log on a server{} level)
error_log  /var/log/nginx/error.log warn;


http {

    # Hide nginx version information.
    server_tokens off;

    # Define the MIME types for files.
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    # Update charset_types due to updated mime.types
    charset_types text/css text/plain text/vnd.wap.wml application/javascript application/json application/rss+xml application/xml;

    # Format to use in log files
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';


    # Default log file
    # (this is only used when you don't override access_log on a server{} level)
    access_log  /var/log/nginx/access.log  main;

    # How long to allow each connection to stay idle; longer values are better
    # for each individual client, particularly for SSL, but means that worker
    # connections are tied up longer. (Default: 65)
    keepalive_timeout 65;

    # Speed up file transfers by using sendfile() to copy directly
    # between descriptors rather than using read()/write().
    # For performance reasons, on FreeBSD systems w/ ZFS
    # this option should be disabled as ZFS's ARC caches
    # frequently used files in RAM by default.
    sendfile        on;

    # Tell Nginx not to send out partial frames; this increases throughput
    # since TCP frames are filled up before being sent out. (adds TCP_CORK)
    tcp_nopush     on;

    # Compression

    # Enable Gzip compressed.
    gzip on;

    # Compression level (1-9).
    # 5 is a perfect compromise between size and cpu usage, offering about
    # 75% reduction for most ascii files (almost identical to level 9).
    gzip_comp_level    5;

    # Don't compress anything that's already small and unlikely to shrink much
    # if at all (the default is 20 bytes, which is bad as that usually leads to
    # larger files after gzipping).
    gzip_min_length    256;

    # Compress data even for clients that are connecting to us via proxies
    # identified by the Via header (required for CloudFront).
    gzip_proxied       any;

    # Tell proxies to cache both the gzipped and regular version of a resource
    # whenever the client's Accept-Encoding capabilities header varies;
    # Avoids the issue where a non-gzip capable client (which is extremely rare
    # today) would display gibberish if their proxy gave them the gzipped version.
    gzip_vary          on;

    # Compress all output labeled with one of the following MIME-types.
    gzip_types
      application/atom+xml
      application/javascript
      application/json
      application/ld+json
      application/manifest+json
      application/rss+xml
      application/vnd.geo+json
      application/vnd.ms-fontobject
      application/x-font-ttf
      application/x-web-app-manifest+json
      application/xhtml+xml
      application/xml
      font/opentype
      image/bmp
      image/svg+xml
      image/x-icon
      text/cache-manifest
      text/css
      text/plain
      text/vcard
      text/vnd.rim.location.xloc
      text/vtt
      text/x-component
      text/x-cross-domain-policy;
    # text/html is always compressed by HttpGzipModule

    # This should be turned on if you are going to have pre-compressed copies (.gz) of
    # static files available. If not it should be left off as it will cause extra I/O
    # for the check. It is best if you enable this in a location{} block for
    # a specific directory, or on an individual server{} level.
    # gzip_static on;

    # Include files in the sites-enabled folder. server{} configuration files should be
    # placed in the sites-available folder, and then the configuration should be enabled
    # by creating a symlink to it in the sites-enabled folder.
    # See doc/sites-enabled.md for more info.
    include /etc/nginx/conf.d/*.conf;
}

# -------------END---------------