From 58be68baaf1d776eaf416c7727a748512f51ef9f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Pedro=20Toledo?= <joao.goncalves@itguys.com.br>
Date: Sat, 7 Feb 2026 01:57:35 -0300
Subject: [PATCH] =?UTF-8?q?updates=20e=20estabiliza=C3=A7ao?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nginx/nginx.conf                | 32 +++++++++++++++++++++++++++-----
 nginx/snippets/log_formats.conf |  2 --
 2 files changed, 27 insertions(+), 7 deletions(-)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 74d2643..4261626 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -5,21 +5,20 @@ load_module modules/ngx_http_modsecurity_module.so;
 load_module modules/ngx_http_geoip2_module.so;
 load_module modules/ngx_http_brotli_filter_module.so;
 load_module modules/ngx_http_brotli_static_module.so;
-load_module modules/ngx_http_cache_purge_module.so;
-load_module modules/ngx_http_upstream_fair_module.so;
+# load_module modules/ngx_http_cache_purge_module.so;
+# load_module modules/ngx_http_upstream_fair_module.so;
 load_module modules/ngx_http_echo_module.so;
 load_module modules/ngx_http_headers_more_filter_module.so;
 load_module modules/ngx_http_subs_filter_module.so;
 load_module modules/ngx_otel_module.so;
 load_module modules/ngx_http_cookie_flag_filter_module.so;
-load_module modules/ngx_http_lower_upper_case_module.so;
+# load_module modules/ngx_http_lower_upper_case_module.so;
 load_module modules/ngx_http_image_filter_module.so;
-load_module modules/ngx_http_ssl_fingerprint_module.so;
+# load_module modules/ngx_http_ssl_fingerprint_module.so;
 
 user nginx;
 worker_processes auto;
 worker_rlimit_nofile 65535;
-
 error_log /var/log/nginx/error.log notice;
 pid /var/run/nginx.pid;
 
@@ -42,6 +41,29 @@ http {
     client_max_body_size 0;
     keepalive_timeout 65;
 
+    # --- Tuning Elite (Redução de I/O & Timeouts) ---
+    # 1. Cache de Descritores de Arquivo
+    open_file_cache max=200000 inactive=20s;
+    open_file_cache_valid 30s;
+    open_file_cache_min_uses 2;
+    open_file_cache_errors on;
+
+    # 2. Conexões & Timeouts
+    reset_timedout_connection on;
+    client_body_timeout 12s;
+    client_header_timeout 12s;
+    send_timeout 10s;
+
+    # 3. Buffers de Memória
+    client_body_buffer_size 128k;
+    client_header_buffer_size 1k;
+    large_client_header_buffers 4 4k;
+
+    # 4. I/O Assíncrono (AIO Threads)
+    # Requer recompilação com --with-threads. Ative após rodar o novo setup.
+    aio threads;
+    directio 4m;
+
     # Compression (Brotli + Gzip)
     include /etc/nginx/snippets/compression.conf;
 
diff --git a/nginx/snippets/log_formats.conf b/nginx/snippets/log_formats.conf
index 3ebaae3..106b2d8 100644
--- a/nginx/snippets/log_formats.conf
+++ b/nginx/snippets/log_formats.conf
@@ -83,8 +83,6 @@ log_format detailed_proxy escape=json
     # --- Pathfinder Extra Metadata (Seção Especial) ---
     '"pathfinder_meta": {'
         '"request_uuid": "$request_id",'
-        '"ja3_fingerprint": "$http_ssl_ja3",'
-        '"h2_fingerprint": "$http2_fingerprint",'
         '"version": "2026.1",'
         '"engine": "Pathfinder-Elite"'
     '}'