nginx.conf.default

# nginx main config file

events {
  worker_connections  4096;
}

http {
  proxy_read_timeout 5m;
  proxy_connect_timeout 5m;
  proxy_send_timeout 5m;

  map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
  }

  server {
    # Convert HTTP to HTTPS
    listen       80;
    server_name  compbio.imm.medicina.ulisboa.pt;
    return       301 https://compbio.imm.medicina.ulisboa.pt$request_uri;
  }

  server {
    listen 443 ssl;
    server_name compbio.imm.medicina.ulisboa.pt;
    #add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

    ssl on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    ssl_certificate /certs/imm-nmorais-p2.fm.ul.pt.cer;
    ssl_certificate_key /certs/imm-nmorais-p2.fm.ul.pt.key;

    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout  10m;
    server_tokens off;

    add_header X-Frame-Options "SAMEORIGIN";
    #add_header Content-Security-Policy "default-src 'self';";

    # Compression
    gzip on;
    gzip_types      text/plain application/xml;
    gzip_proxied    no-cache no-store private expired auth;
    gzip_min_length 1000;
    #gunzip on;
    
    location / {
        include shinyproxy.conf;
    }
    
    include error.conf;
    include public.conf;
    include favicon.conf;
    include location_apps.conf;
    include location_utils.conf;
  }
}