51 lines
840 B
Plaintext
51 lines
840 B
Plaintext
|
server {
|
||
|
|
server_name _;
|
||
|
|
|
||
|
|
listen 443 default_server bind deferred ssl;
|
||
|
|
## TODO: reuseport
|
||
|
|
listen 443 default_server quic reuseport;
|
||
|
|
http2 on;
|
||
|
|
|
||
|
|
## nota bene
|
||
|
|
ssl_reject_handshake on;
|
||
|
|
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
|
||
|
|
|
||
|
|
access_log off;
|
||
|
|
|
||
|
|
default_type text/plain;
|
||
|
|
|
||
|
|
root /var/www/empty;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
keepalive_timeout 0;
|
||
|
|
return 200;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
## GRPC over TLS
|
||
|
|
server {
|
||
|
|
server_name _;
|
||
|
|
|
||
|
|
listen 444 default_server bind deferred ssl;
|
||
|
|
## TODO: reuseport
|
||
|
|
listen 444 default_server quic reuseport;
|
||
|
|
http2 on;
|
||
|
|
|
||
|
|
## nota bene
|
||
|
|
ssl_reject_handshake on;
|
||
|
|
|
||
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
|
||
|
|
|
||
|
|
access_log off;
|
||
|
|
|
||
|
|
default_type text/plain;
|
||
|
|
|
||
|
|
root /var/www/empty;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
keepalive_timeout 0;
|
||
|
|
return 200;
|
||
|
|
}
|
||
|
|
}
|