diff --git a/nextcloud/nextcloud.conf b/nextcloud/nextcloud.conf index 3588921..25bfb15 100644 --- a/nextcloud/nextcloud.conf +++ b/nextcloud/nextcloud.conf @@ -1,5 +1,5 @@ server { - server_name cloud.example.com; + server_name cloud.neller.org; add_header Strict-Transport-Security "max-age=15552000; includeSubDomains; preload"; location / { @@ -9,8 +9,6 @@ server { proxy_set_header X-Scheme $scheme; proxy_set_header X-Forwarded-Proto $scheme; - client_max_body_size 0; - } location /.well-known/carddav { @@ -20,25 +18,40 @@ server { return 301 $scheme://$host/remote.php/dav; } + client_max_body_size 512M; + client_body_timeout 300s; + fastcgi_buffers 64 4K; + gzip on; + gzip_vary on; + gzip_comp_level 4; + gzip_min_length 256; + gzip_proxied expired no-cache no-store private no_last_modified no_etag auth; + gzip_types application/atom+xml text/javascript application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy; + + # The setting allows you to optimize the HTTP2 bandwidth. + # See https://blog.cloudflare.com/delivering-http-2-upload-speed-improvements/ + # for tuning hints + client_body_buffer_size 512k; + listen [::]:443 ssl ipv6only=on; # managed by Certbot listen 443 ssl; # managed by Certbot - ssl_certificate /etc/letsencrypt/live/cloud.example.com/fullchain.pem; # managed by Certbot - ssl_certificate_key /etc/letsencrypt/live/cloud.example.com/privkey.pem; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/cloud.neller.org/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/cloud.neller.org/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot } + server { - if ($host = cloud.example.com) { + if ($host = cloud.neller.org) { return 301 https://$host$request_uri; } # managed by Certbot - server_name cloud.example.com; - listen [::]:80; - listen 80 ; + server_name cloud.neller.org; + listen 80; + listen [::]:80; return 404; # managed by Certbot } -~