upstream herpserver {
server 127.0.0.1:9021 weight=1 fail_timeout=300s;
}
server {
# listen 80;
listen 443;
server_name erp.heqi.io api.parts.heqiauto.com;
#server_name api.erp.heqiauto.com
# Specifies the maximum accepted body size of a client request,
# as indicated by the request header Content-Length.
client_max_body_size 200m;
# ssl log files
access_log /var/log/nginx/access_api.erp.log main;
error_log /var/log/nginx/error_api.erp.log;
error_page 500 502 503 504 /50x.html;
charset utf-8;
# increase proxy buffer to handle some OpenERP web requests
proxy_buffers 16 64k;
proxy_buffer_size 128k;
#gzip setting
gzip on;
gzip_disable "MSIE [1-6]\.";
gzip_vary on;
gzip_proxied any;
gzip_comp_level 9;
gzip_buffers 16 8k;
gzip_min_length 2048;
gzip_http_version 1.1;
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/x-font-ttf;
location / {
proxy_pass http://127.0.0.1:9021/;
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
# set headers
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
# by default, do not forward anything
proxy_redirect off;
}
proxy_connect_timeout 5000s;
proxy_read_timeout 5000s;
proxy_send_timeout 5000s;
ssl on;
ssl_certificate /etc/nginx/cert/api.pem;
ssl_certificate_key /etc/nginx/cert/api.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_prefer_server_ciphers on;
# cache some static data in memory for 60mins.
# under heavy load this should relieve stress on the OpenERP web interface a bit.
#location ~* /web/static/ {
# proxy_cache_valid 200 60m;
# proxy_buffering on;
# expires 864000;
# proxy_pass http://127.0.0.1:8059/;
# #proxy_pass http://openerpserver;
#}
}