joao.goncalves
/
NgixProxy_Pathfinder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Auto-Sync] Atualização das configurações em srvproxy001.itguys.com.br - 2025-10-01 08:39:16

This commit is contained in:
srvproxy001.itguys.com.br 2025-10-01 08:39:16 -03:00
parent 5ff3328e57
commit 0835752133
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
nginx/sites-available/cloud.grupopralog.com.br.conf
View File

@ -31,6 +31,14 @@ map $request_uri $cache_asset {
default off; default off;
} }
map $request_uri $cacheable_session_request {
~^/apps/files/$ 1;
~^/apps/files/\?dir= 1;
~^/apps/dashboard/$ 1;
~^/remote\.php/dav/files/ 1;
default 0;
}
# UPSTREAMS # UPSTREAMS
upstream nextcloud_backend { upstream nextcloud_backend {
server 172.16.253.12; server 172.16.253.12;
@ -42,8 +50,6 @@ upstream officeonline_backend {
server 172.16.253.101; server 172.16.253.101;
} }
# BLOCO HTTP: Redirecionar para HTTPS # BLOCO HTTP: Redirecionar para HTTPS
server { server {
listen 80; listen 80;
@ -51,7 +57,7 @@ server {
server_name cloud.grupopralog.com.br; server_name cloud.grupopralog.com.br;
# Aplica o rate limiting a todo o tráfego HTTP. # Aplica o rate limiting a todo o tráfego HTTP.
limit_req zone=global_limit burst=20 nodelay; #limit_req zone=global_limit burst=20 nodelay;
# Responde ao desafio do Let's Encrypt # Responde ao desafio do Let's Encrypt
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
@ -83,7 +89,7 @@ server {
} }
# --- Aplica o Rate Limiting (zona definida em nginx.conf) --- # --- Aplica o Rate Limiting (zona definida em nginx.conf) ---
limit_req zone=global_limit burst=100 nodelay; #limit_req zone=global_limit burst=100 nodelay;
# --- Parâmetros de SSL/TLS (Ciphers atualizados conforme best practices) --- # --- Parâmetros de SSL/TLS (Ciphers atualizados conforme best practices) ---
ssl_certificate /etc/letsencrypt/live/cloud.grupopralog.com.br/fullchain.pem; # managed by Certbot ssl_certificate /etc/letsencrypt/live/cloud.grupopralog.com.br/fullchain.pem; # managed by Certbot