ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: opt / bitninja-waf3 / nginx / conf

#Nginx Proxy for el7
user bitninja-waf3 bitninja-waf3;
worker_processes  auto;

pid /opt/bitninja-waf3/nginx/sbin/WafProTp.pid;

events {
    worker_connections  1024;
}

http {
    server_tokens off;

client_max_body_size 0;
    
    gzip_types text/plain text/css application/javascript application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

map $http_upgrade $proxy_connection {
        default upgrade;
        '' close;
    }

map $server_addr $bind_ip {
        default $server_addr;
        "~^[a-fA-F0-9:\[\]]+$" [$server_addr];
    }

map $http_x_forwarded_proto $real_proto {
        default $scheme;
        ~^https $http_x_forwarded_proto;  
    }

proxy_http_version 1.1;
    proxy_ssl_server_name on;
    proxy_ssl_name $host;
    proxy_read_timeout 300s;
    proxy_connect_timeout 90s;
    proxy_send_timeout 90s;
    proxy_buffering off;
    proxy_buffer_size 128k;
    proxy_buffers 4 256k;
    proxy_busy_buffers_size 256k;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $real_proto;

real_ip_header X-Forwarded-For;
    real_ip_recursive on;
    set_real_ip_from 192.168.0.0/16;
    set_real_ip_from 172.16.0.0/12;
    set_real_ip_from 10.0.0.0/8;
    set_real_ip_from 127.0.0.0/8;

include /opt/bitninja-waf3/nginx/conf/localIps.conf;

log_format combined_host '$host $remote_addr - $remote_user [$time_local] '
    '"$request" $status $bytes_sent '
    '"$http_referer" "$http_user_agent"';

access_log /var/log/bitninja-waf3/nginx_proxy_access.log combined_host;
    error_log /var/log/bitninja-waf3/nginx_proxy_error.log;

error_page 500 502 503 504 @errorz;

# HTTP Reverse Proxy (tcp/60300 → tcp/80)
    server {
        listen 60300;

location  @errorz {
        root /opt/bitninja-waf3/www;
        try_files $uri /50x.html =502;
        }

location / {
            proxy_pass http://$server_addr:80;
            proxy_bind $remote_addr transparent;

}
    }

# HTTPS Reverse Proxy (tcp/60301 → tcp/443)
    server {
        listen 60301 ssl;

ssl_certificate /opt/bitninja-waf3/nginx/conf/server.crt;
        ssl_certificate_key /opt/bitninja-waf3/nginx/conf/server.key;

location  @errorz {
        root /opt/bitninja-waf3/www;
        try_files $uri /50x.html =502;
        }

location / {
            proxy_pass https://$server_addr:443;
            proxy_bind $remote_addr transparent;
        }
    }
}

[-] win-utf [edit]
[-] uwsgi_params [edit]
[-] fastcgi.conf [edit]
[-] scgi_params [edit]
[+] ..
[-] server.crt [edit]
[-] scgi_params.default [edit]
[-] mime.types [edit]
[-] uwsgi_params.default [edit]
[-] nginx.conf [edit]
[-] localIps.conf [edit]
[-] nginx.conf.default [edit]
[-] fastcgi_params.default [edit]
[-] server.key [edit]
[-] koi-win [edit]
[-] mime.types.default [edit]
[-] fastcgi_params [edit]
[-] fastcgi.conf.default [edit]
[-] koi-utf [edit]