# -------------------------------- # Nginx configuration file for KIX # -------------------------------- # !!! don't change any of the following if you do not know what you are doing !!! # # SSL Configuration - enable this if you want to use SSL within the KIX application and without using a separate proxy infront of KIX # # the SSL ports are 80, 8080 and 9080 as well to provide the ssl config as a drop-in replacement for non-ssl server { listen 80 ssl; include error.inc; include /etc/nginx/conf.d/ssl/common.conf; include /etc/nginx/conf.d/ssl/ssl.conf; location / { proxy_pass http://frontend; include /etc/nginx/conf.d/ssl/common_location.conf; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-NginX-Proxy true; proxy_headers_hash_max_size 512; proxy_headers_hash_bucket_size 128; } } server { listen 8080 ssl; include error.inc; client_max_body_size 100m; increase timeout for large ticket prints proxy_read_timeout 600; proxy_connect_timeout 600; proxy_send_timeout 600; include /etc/nginx/conf.d/ssl/common.conf; include /etc/nginx/conf.d/ssl/ssl.conf; location / { proxy_pass http://backend; include /etc/nginx/conf.d/ssl/common_location.conf; } } server { listen 9080 ssl; include error.inc; client_max_body_size 100m; increase timeout for large ticket prints proxy_read_timeout 600; proxy_connect_timeout 600; proxy_send_timeout 600; include /etc/nginx/conf.d/ssl/common.conf; include /etc/nginx/conf.d/ssl/ssl.conf; resolver 127.0.0.11 valid=30s; set $ssp http://ssp; location / { proxy_pass $ssp; include /etc/nginx/conf.d/ssl/common_location.conf; } }