Andreas/LibreChat
1
0
Fork 0
mirror of https://github.com/danny-avila/LibreChat.git synced 2025-12-16 16:30:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

🔏 feat: Nginx SSL Secure Config (#1615)

Browse source 
* Update nginx.conf

Add Mozilla SSL Configuration Generator recommended options.

* Update nginx.conf Remove Space
This commit is contained in:
bsu3338 2024-01-23 06:30:26 -06:00 • committed by GitHub
parent 5730028b83
commit 81ff598eba
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 70 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

85
client/nginx.conf
View file

@ -1,21 +1,76 @@
# Secure default configuration generated by Mozilla SSL Configuration Generator
# generated 2024-01-21, Mozilla Guideline v5.7, nginx 1.24.0, OpenSSL 3.1.4, intermediate configuration
# https://ssl-config.mozilla.org/#server=nginx&version=1.24.0&config=intermediate&openssl=3.1.4&guideline=5.7
server {
listen 80;
# listen 443 ssl;
listen 80 default_server;
listen [::]:80 default_server;
# ssl_certificate /etc/nginx/ssl/nginx.crt;
# ssl_certificate_key /etc/nginx/ssl/nginx.key;
# To Configure SSL, comment all lines within the Non-SSL section and uncomment all lines under the SSL section.
######################################## Non-SSL ########################################
server_name localhost;
# Increase the client_max_body_size to allow larger file uploads
# The default limits for image uploads as of 11/22/23 is 20MB/file, and 25MB/request
client_max_body_size 25M;
server_name localhost;
location /api {
proxy_pass http://api:3080/api;
}
# Increase the client_max_body_size to allow larger file uploads
# The default limits for image uploads as of 11/22/23 is 20MB/file, and 25MB/request
client_max_body_size 25M;
location / {
proxy_pass http://api:3080;
}
location /api {
proxy_pass http://api:3080/api;
}
location / {
proxy_pass http://api:3080;
}
######################################## SSL ########################################
# # Redirect all http traffic to https
# location / {
# return 301 https://$host$request_uri;
# }
}
#server {
# listen 443 ssl http2;
# listen [::]:443 ssl http2;
# ssl_certificate /etc/nginx/ssl/nginx.crt;
# ssl_certificate_key /etc/nginx/ssl/nginx.key;
# ssl_session_timeout 1d;
# ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
# ssl_session_tickets off;
# # curl https://ssl-config.mozilla.org/ffdhe2048.txt > /etc/nginx/ssl/dhparam
# ssl_dhparam /etc/nginx/ssl/dhparam;
# # intermediate configuration
# ssl_protocols TLSv1.2 TLSv1.3;
# ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
# ssl_prefer_server_ciphers off;
# # HSTS (ngx_http_headers_module is required) (63072000 seconds)
# add_header Strict-Transport-Security "max-age=63072000" always;
# # OCSP stapling
# ssl_stapling on;
# ssl_stapling_verify on;
# # verify chain of trust of OCSP response using Root CA and Intermediate certs
# ssl_trusted_certificate /etc/nginx/ssl/ca.crt;
# # replace with the IP address of your resolver
# resolver 127.0.0.1;
# server_name localhost;
# # Increase the client_max_body_size to allow larger file uploads
# # The default limits for image uploads as of 11/22/23 is 20MB/file, and 25MB/request
# client_max_body_size 25M;
# location /api {
# proxy_pass http://api:3080/api;
# }
# location / {
# proxy_pass http://api:3080;
# }
#}