From d9853ba926aa925bd6ca887ad582410270c22736 Mon Sep 17 00:00:00 2001 From: Olivier Date: Fri, 13 Oct 2023 19:37:39 +0200 Subject: [PATCH] =?UTF-8?q?T=C3=A9l=C3=A9verser=20les=20fichiers=20vers=20?= =?UTF-8?q?"conf/hyperpipe"?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- conf/hyperpipe/nginx.conf | 120 ++++++++++++++++++++++++++++++++++++ conf/hyperpipe/youtube.conf | 29 +++++++++ 2 files changed, 149 insertions(+) create mode 100644 conf/hyperpipe/nginx.conf create mode 100644 conf/hyperpipe/youtube.conf diff --git a/conf/hyperpipe/nginx.conf b/conf/hyperpipe/nginx.conf new file mode 100644 index 0000000..ff03eef --- /dev/null +++ b/conf/hyperpipe/nginx.conf @@ -0,0 +1,120 @@ +# 2023-10-13 + +user root; + +worker_processes auto; +worker_rlimit_nofile 100000; + +pid /var/run/nginx.pid; + +#error_log /var/log/nginx/error.log notice; +error_log off; + +thread_pool default threads=2048 max_queue=65536; + +events { + worker_connections 4096; + multi_accept on; + use epoll; +} + +http { + resolver xxx.xxx.xxx.xxx ipv6=off valid=300s; + + include /etc/nginx/mime.types; + default_type application/octet-stream; + + server_names_hash_bucket_size 128; + server_names_hash_max_size 1024; + + log_format main '$remote_addr - $remote_user [$time_local] "$request" ' + '$status $body_bytes_sent "$http_referer" ' + '"$http_user_agent" "$http_x_forwarded_for"'; + + #access_log /var/log/nginx/access.log main; + access_log off; + + sendfile on; + tcp_nodelay on; + tcp_nopush on; + + keepalive_timeout 120; + keepalive_requests 100000; + + send_timeout 30; + client_body_timeout 30; + client_header_timeout 30; + reset_timedout_connection on; + + open_file_cache max=2000 inactive=20s; + open_file_cache_valid 60s; + open_file_cache_min_uses 5; + open_file_cache_errors off; + + server_tokens off; + types_hash_max_size 2048; + client_body_buffer_size 128k; + client_header_buffer_size 3m; + client_max_body_size 128k; + large_client_header_buffers 8 256k; + + add_header X-XSS-Protection "1; mode=block"; + add_header X-Frame-Options "SAMEORIGIN"; + add_header X-Content-Type-Options nosniff; + add_header Strict-Transport-Security "max-age=63072000" always; + add_header Access-Control-Allow-Origin "*"; + add_header Access-Control-Allow-Headers "*, Authorization"; + add_header X-Permitted-Cross-Domain-Policies "all"; + + aio threads=default; + + gzip on; + gzip_static on; + gzip_min_length 10240; + gzip_comp_level 3; + #gzip_http_version 1.1; + gzip_vary on; + gzip_disable msie6; + gzip_disable "MSIE [1-6]\."; + gzip_proxied any; + gzip_buffers 16 8k; + gzip_types + text/plain + text/css + text/xml + text/javascript + text/x-component + application/x-javascript + application/xml + application/javascript + application/json + application/xml+rss + application/rss+xml + application/atom+xml + font/truetype + font/opentype + application/vnd.ms-fontobject + image/svg+xml + application/geo+json + application/ld+json + application/manifest+json + application/rdf+xml + application/wasm + application/x-web-app-manifest+json + application/xhtml+xml + font/eot + font/otf + font/ttf + image/bmp + text/cache-manifest + text/calendar + text/markdown + text/vcard + text/vnd.rim.location.xloc + text/vtt + text/x-cross-domain-policy + application/x-font-ttf + image/x-icon; + + include /etc/nginx/conf.d/*.conf; +} diff --git a/conf/hyperpipe/youtube.conf b/conf/hyperpipe/youtube.conf new file mode 100644 index 0000000..a70d714 --- /dev/null +++ b/conf/hyperpipe/youtube.conf @@ -0,0 +1,29 @@ +# 2023-10-13 + +proxy_set_header Access-Control-Allow-Origin *; +proxy_set_header Access-Control-Allow-Headers *; +proxy_set_header X-Forwarded-For ""; +proxy_set_header CF-Connecting-IP ""; +proxy_set_header Connection keep-alive; + +proxy_hide_header "alt-svc"; +proxy_hide_header Cache-Control; +proxy_hide_header etag; + +proxy_buffering on; +proxy_buffers 1024 16k; + +sendfile on; +sendfile_max_chunk 512k; + +tcp_nopush on; +aio_write on; +directio 16m; + +proxy_http_version 1.1; +proxy_max_temp_file_size 32m; + +access_log off; +error_log off; + +proxy_pass http://unix:/var/run/ytproxy/actix.sock;