-
Ciphers to choose from when negotiating TLS handshakes.
Type
null or string
Default
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305"
Declarations
-
Whether to enable FC-customized nginx.
Type
boolean
Default
false
Example
true
Declarations
-
Whether to enable Global rate limiting.
Type
boolean
Default
false
Example
true
Declarations
-
Adds index directive.
Type
null or string
Default
null
Example
"index.php index.html"
Declarations
-
If set, all requests for this host are redirected (defaults to 301,
configurable with redirectCode) to the given hostname.
Type
null or string
Default
null
Example
"newserver.example.org"
Declarations
-
Configures how often log files are rotated before being removed.
If count is 0, old versions are removed rather than rotated.
Type
signed integer
Default
7
Declarations
-
Configuration lines to be appended inside of the http {} block.
Type
strings concatenated with "\n"
Default
""
Declarations
-
Basic Auth password file for a vhost.
Can be created via: {command}htpasswd -c <filename> <username>.
WARNING: The generate file contains the users' passwords in a
non-cryptographically-securely hashed way.
Type
null or absolute path
Default
null
Declarations
-
Adds try_files directive.
Type
null or string
Default
null
Example
"$uri =404"
Declarations
-
Configures the number of worker processes.
Type
signed integer
Default
fclib.min [(fclib.currentCores 1) 12]
Declarations
-
HTTP status used by globalRedirect and forceSSL. Possible usecases
include temporary (302, 307) redirects, keeping the request method and
body (307, 308), or explicitly resetting the method to GET (303).
See https://developer.mozilla.org/en-US/docs/Web/HTTP/Redirections.
Type
integer between 300 and 399 (both inclusive)
Default
301
Example
308
Declarations
-
Adds a return directive, for e.g. redirections.
Type
null or string
Default
null
Example
"301 http://example.com$request_uri"
Declarations
-
A host of an existing Let's Encrypt certificate to use.
This is useful if you have many subdomains and want to avoid hitting the
rate limit.
Alternately, you can generate a certificate through {option}enableACME.
Note that this option does not create any certificates, nor it does add subdomains to existing ones – you will need to create them manually using .
Type
null or string
Default
null
Declarations
-
IPv6 address to listen on.
If neither <option>listenAddress</option> nor <option>listenAddress6</option> is set,
the service listens on the frontend addresses.
If you need more options, use <option>listen</option>.
If you want to configure any number of IPs use <literal>listenAddresses</literal>.
Type
null or string
Default
null
Declarations
-
Whether to enable kTLS support.
Implementing TLS in the kernel (kTLS) improves performance by significantly
reducing the need for copying operations between user space and the kernel.
Required Nginx version 1.21.4 or later.
Type
boolean
Default
false
Declarations