mailcow_proxy.conf 1.1 KB

1234567891011121314151617181920212223242526
  1. server {
  2. listen 80;
  3. listen 443 ssl;
  4. server_name oniz.s-up.net autoconfig.s-up.net autodiscover.s-up.net;
  5. ssl_certificate /etc/ssl/mail/cert.pem;
  6. ssl_certificate_key /etc/ssl/mail/key.pem;
  7. ssl_protocols TLSv1.2;
  8. ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
  9. ssl_prefer_server_ciphers on;
  10. ssl_session_cache shared:SSL:50m;
  11. ssl_session_timeout 1d;
  12. ssl_session_tickets off;
  13. location / {
  14. proxy_pass http://oniz.s-up.net:8080/;
  15. proxy_set_header Host $http_host;
  16. proxy_set_header X-Real-IP $remote_addr;
  17. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  18. proxy_set_header X-Forwarded-Proto $scheme;
  19. client_max_body_size 0;
  20. proxy_buffer_size 128k;
  21. proxy_buffers 64 512k;
  22. proxy_busy_buffers_size 512k;
  23. }
  24. }