Nginx directives

• add_header

• client_max_body_size

• server_name YOUR_DOMAIN.COM;
• root /var/www/your_domain;

• listen

listen 443 ssl;

listen 80;

• try_files $uri $uri/ @rewrite;

• fastcgi_pass (Used for PHP)

• resolver
• rewrite
• location
• upstream
• proxy_pass, reverse proxy configuration
• return

• worker_processes auto;
• sendfile on;
• include /etc/nginx/mime.types;
• tcp_nopush on;
• tcp_nodelay on;
• chunked_transfer_encoding

• server_tokens off; (Context: http, server, location)

Proxy

Proxy (Nginx can proxy requests using http, FastCGI, uwsgi, SCGI, or memcached.)

• proxy_read_timeout 2400s;
• proxy_connect_timeout 75s;
• proxy_send_timeout 2400s;
• proxy_buffer_size 32k;
• proxy_buffers 40 32k;
• proxy_busy_buffers_size 64k;
• proxy_temp_file_write_size 250m;
• proxy_http_version 1.1;
• proxy_redirect [default|off|redirect replacement]

SSL

SSL (See also: certbot)

ssl_certificate /etc/nginx/ssl/example.pem;

ssl_certificate_key /etc/nginx/ssl/example.key;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

ssl_prefer_server_ciphers on; server ciphers should be preferred over client ciphers when using the SSLv3 and TLS protocols

ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;

ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;

ssl_session_timeout

ssl_ciphers

See also

• Nginx: nginx -t, nginx.conf, /etc/nginx/fastcgi.conf, Nginx Sample Configurations, server, ssl_certificate, redirect, return, rewrite, sendfile, request_uri, server_name, listen, /etc/nginx/snippets/, /etc/nginx/sites-enabled/default
• Web server: Nginx: /etc/nginx/nginx.conf, nginx -t, Nginx logs, Nginx change log, PHP, php-fpm, Let's encrypt, Nginx directives, Reverse Proxy, Configure HTTP redirection Nginx, Return, proxy_pass (Reverse proxy), ngx_http_rewrite_module, /etc/nginx/sites-enabled/, error.log, access.log, /nginx status, AIO

http://nginx.org/en/docs/http/server_names.html

http://nginx.org/en/docs/http/ngx_http_core_module.html#listen

https://docs.nginx.com/nginx/admin-guide/web-server/serving-static-content/#enabling-sendfile

http://nginx.org/en/docs/http/ngx_http_core_module.html#server_tokens

http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers