koreader-sync/rootfs/etc/confd/templates/nginx.conf.tmpl

pid tmp/{{"{{"}}GIN_ENV{{"}}"}}-nginx.pid;

# This number should be at maxium the number of CPU on the server
worker_processes 4;
#daemon off;

events {
    # Number of connections per worker
    worker_connections 4096;
}

http {
    # use sendfile
    sendfile on;

    # Gin initialization
    {{"{{"}}GIN_INIT{{"}}"}}

    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;

    server {
        # List port
        listen {{"{{"}}GIN_PORT{{"}}"}} ssl;

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_certificate /etc/ssl/nginx/{{getenv "CERT_NAME" "fullchain.pem"}};
        ssl_certificate_key /etc/ssl/nginx/{{getenv "KEY_NAME" "privkey.pem"}};
        ssl_ciphers HIGH:!aNULL:!MD5;

        keepalive_timeout 70;

        # Access log with buffer, or disable it completetely if unneeded
        access_log logs/{{"{{"}}GIN_ENV{{"}}"}}-access.log combined buffer=16k;
        # access_log off;

        # Error log
        error_log logs/{{"{{"}}GIN_ENV{{"}}"}}-error.log debug;

        # Gin runtime
        {{"{{"}}GIN_RUNTIME{{"}}"}}
    }
}