# Individual nginx logs for this GitLab vhostĪccess_log /var/log/nginx/gitlab_access.log Įrror_log /var/log/nginx/gitlab_error. # sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096 # ssl_trusted_certificate /etc/nginx/ssl/ ![]() # Replace with your ssl_trusted_certificate. Using Unicorn+Nginx With a reverse proxy With puma If using Docker official image, passenger variant Old versions of Redmine and Rails References. # If your certficate has OCSP, enable OCSP stapling to reduce the overhead and latency of running SSL. # add_header Strict-Transport-Security "max-age=31536000 includeSubDomains" # HSTS is a feature improving protection against MITM attacks # See app/controllers/application_controller.rb for headers set # GitLab needs backwards compatible ciphers to retain compatibility with Java IDEs Ssl_certificate_key /etc/letsencrypt/live//privkey.pem # managed by Certbot Ssl_certificate /etc/letsencrypt/live//fullchain.pem # managed by Certbot Root /opt/gitlab/embedded/service/gitlab-rails/public Server_tokens off # Don't show the nginx version number, a security best practice Server_name # Replace this with something like Server Software: Server Hostname: 178.63. When hosted with APACHE and tested with APACHE benchmark tool i got the following output. Finally i deployed one product based web site to test this and tried to find out which the fastest web server i can use. Listen :443 ipv6only=on ssl default_server Use APACHE + PASSANGER as easy deployment tool.and some web pages says that use THIN server. Server unix:/var/opt/gitlab/gitlab-workhorse/socket fail_timeout=0 # See installation.md#using-https for additional HTTPS configuration details. # If you change this file in a Merge Request, please also create ![]() # Lines starting with one hash (#) are configuration parameters that can be uncommented. # Lines starting with two hashes (#) are comments with information. The LFS produces errors like LFS: Client error: from HTTP 422
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |