diff --git a/angie/autoconf/http-buffers.conf b/angie/autoconf/http-buffers.conf index 2f8939d..bf953e5 100644 --- a/angie/autoconf/http-buffers.conf +++ b/angie/autoconf/http-buffers.conf @@ -1,4 +1,6 @@ subrequest_output_buffer_size 16k; client_body_buffer_size 16k; +client_max_body_size 64k; + client_header_buffer_size 4k; large_client_header_buffers 8 16k; diff --git a/angie/autoconf/http-request-headers-forwarded.conf b/angie/autoconf/http-request-headers-forwarded.conf index afb55c6..98a5475 100644 --- a/angie/autoconf/http-request-headers-forwarded.conf +++ b/angie/autoconf/http-request-headers-forwarded.conf @@ -17,8 +17,6 @@ map $remote_addr map $http_forwarded $proxy_add_forwarded { - volatile; - ## if the incoming Forwarded header is syntactically valid, append to it "~^(,[ \\t]*)*([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?(;([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?)*([ \\t]*,([ \\t]*([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?(;([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?)*)?)*$" "$http_forwarded, $proxy_forwarded_elem"; diff --git a/angie/autoconf/http-server-tokens.conf b/angie/autoconf/http-server-tokens.conf new file mode 100644 index 0000000..b7a0bcb --- /dev/null +++ b/angie/autoconf/http-server-tokens.conf @@ -0,0 +1 @@ +server_tokens off; \ No newline at end of file