-
Ciphers to choose from when negotiating TLS handshakes.
Type
null or string
Default
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305"
Declarations
-
Whether to enable FC-customized nginx.
Type
boolean
Default
false
Example
true
Declarations
-
Whether to enable Global rate limiting.
Type
boolean
Default
false
Example
true
Declarations
-
These lines go to the end of the location verbatim.
Type
strings concatenated with "\n"
Default
""
Declarations
-
Adds proxy_pass directive and sets recommended proxy headers if
recommendedProxySettings is enabled.
Type
null or string
Default
null
Example
"http://www.example.org/"
Declarations
-
Basic Auth protection for a vhost.
WARNING: This is implemented to store the password in plain text in the
Nix store.
Type
attribute set of string
Default
{ }
Example
{
user = "password";
};
Declarations
-
Sets the maximum number of concurrent requests per client.
Type
positive integer, meaning >0
Default
200
Declarations
-
Name of this virtual host. Defaults to attribute name in virtualHosts.
Type
null or string
Default
null
Example
"example.org"
Declarations
-
HTTP status used by globalRedirect and forceSSL. Possible usecases
include temporary (302, 307) redirects, keeping the request method and
body (307, 308), or explicitly resetting the method to GET (303).
See https://developer.mozilla.org/en-US/docs/Web/HTTP/Redirections.
Type
integer between 300 and 399 (both inclusive)
Default
301
Example
308
Declarations
-
Basic Auth password file for a vhost.
Can be created via: <command>htpasswd -c <filename> <username></command>.
WARNING: The generate file contains the users' passwords in a
non-cryptographically-securely hashed way.
Type
null or absolute path
Default
null
Declarations
-
Addresses to listen on if a vhost does not specify any.
Type
list of string
Default
"addresses of the `fe` network (IPv4 & IPv6)"
Declarations
-
Listen addresses for this virtual host.
Compared to listen this only sets the addresses
and the ports are chosen automatically.
Note: This option overrides enableIPv6
Type
list of string
Default
"The default listen addresses configured in `flyingcircus.services.nginx.defaultListenAddresses`"
Example
[
"127.0.0.1"
"[::1]"
]
Declarations
-
Configures a timeout (seconds) for a graceful shutdown of worker processes.
When the time expires, nginx will try to close all the connections currently
open to facilitate shutdown.
By default, nginx will try to close connections 4 minutes after a reload.
Type
signed integer
Default
240
Declarations
-
Alias directory for requests.
Type
null or absolute path
Default
null
Example
"/your/alias/directory"
Declarations
-
Set the contact address for Let's Encrypt (certificate expiry, policy changes).
Defaults to none.
Type
null or string
Default
null
Declarations