11 lines
785 B
Plaintext
11 lines
785 B
Plaintext
limit_req_zone $binary_remote_addr zone=api_per_ip:10m rate=10r/s;
|
|
server { listen 80; server_name _; return 301 https://$host$request_uri; }
|
|
server {
|
|
listen 443 ssl http2; server_name ${PUBLIC_HOST};
|
|
ssl_certificate /etc/nginx/tls/fullchain.pem; ssl_certificate_key /etc/nginx/tls/privkey.pem;
|
|
ssl_protocols TLSv1.2 TLSv1.3; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
|
add_header X-Content-Type-Options nosniff always; add_header Referrer-Policy strict-origin-when-cross-origin always;
|
|
client_max_body_size 12m;
|
|
location / { limit_req zone=api_per_ip burst=30 nodelay; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://api:3000; }
|
|
}
|