{"id":1228,"date":"2016-03-06T01:03:12","date_gmt":"2016-03-05T23:03:12","guid":{"rendered":"http:\/\/www.shukko.com\/x3\/?p=1228"},"modified":"2016-03-06T01:03:12","modified_gmt":"2016-03-05T23:03:12","slug":"nginix-reverse-proxy-config","status":"publish","type":"post","link":"https:\/\/www.shukko.com\/x3\/2016\/03\/06\/nginix-reverse-proxy-config\/","title":{"rendered":"nginix reverse proxy config"},"content":{"rendered":"<p>IP Tables Script<\/p>\n<p>rules.sh<\/p>\n<pre>\r\n\r\niptables -F\r\niptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP\r\niptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP\r\niptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP\r\niptables -A INPUT -i eth0 -j ACCEPT\r\niptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT\r\niptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT\r\niptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT\r\niptables -P OUTPUT ACCEPT\r\niptables -P INPUT DROP\r\n\r\n<\/pre>\n<p>cat \/etc\/nginx\/conf.d\/domain.com.conf<\/p>\n<pre>\r\n\r\nserver {\r\n       listen         80;\r\n       server_name    domain.com;\r\n       return         301 https:\/\/$server_name$request_uri;\r\n}\r\nserver {\r\n      listen 443 ssl;\r\n      server_name domain.com;\r\n\r\n      ssl_certificate \/home\/ssl\/cert.crt;\r\n      ssl_certificate_key \/home\/ssl\/cert.key;\r\n\r\n      access_log   \/home\/logs\/domain.com.access.log;\r\n      error_log \/home\/logs\/domain.com.error.log;\r\n\r\n      location \/ {\r\n            proxy_pass https:\/\/WEBSERVERIP\/;\r\n            proxy_redirect off;\r\n            proxy_set_header Host $host;\r\n            proxy_set_header X-Forwarded-SSL on;\r\n            proxy_set_header X-Forwarded-Proto $scheme;\r\n            proxy_set_header X-Real-IP $remote_addr;\r\n            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\r\n            proxy_max_temp_file_size 0;\r\n            client_max_body_size 10m;\r\n            client_body_buffer_size 128k;\r\n            proxy_connect_timeout 90;\r\n            proxy_send_timeout 90;\r\n            proxy_read_timeout 90;\r\n            proxy_buffer_size 4k;\r\n            proxy_buffers 4 32k;\r\n            proxy_busy_buffers_size 64k;\r\n            proxy_temp_file_write_size 64k;\r\n\r\n      }\r\n}\r\n\r\n\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>IP Tables Script rules.sh iptables -F iptables -A INPUT -p tcp &#8211;tcp-flags ALL NONE -j DROP iptables -A INPUT -p tcp ! &#8211;syn -m state &#8211;state NEW -j DROP iptables -A INPUT -p tcp &#8211;tcp-flags ALL ALL -j DROP iptables -A INPUT -i eth0 -j ACCEPT iptables -A INPUT -p tcp -m tcp &#8211;dport 80 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1228","post","type-post","status-publish","format-standard","hentry","category-kategerisiz"],"_links":{"self":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/1228","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/comments?post=1228"}],"version-history":[{"count":1,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/1228\/revisions"}],"predecessor-version":[{"id":1229,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/1228\/revisions\/1229"}],"wp:attachment":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/media?parent=1228"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/categories?post=1228"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/tags?post=1228"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}