summaryrefslogtreecommitdiff
path: root/www/nghttp2/files/nghttpx.conf.sample
blob: 58706558466a33144c8cb2c30dc683c8b788fcbb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
# $FreeBSD$
# Sample config file for nghttpx in proxy forwarding mode.

# See https://nghttp2.org/documentation/nghttpx.1.html for
# an online reference.

# Where to relay to, where to listen
backend=127.0.0.1,80
frontend=*,443

# Provide the default SSL certificate file and private key
# You should use a full chain certificate - your certificate
# with any intermediates appended.
private-key-file=/etc/ssl/mycert/privkey.pem
certificate-file=/etc/ssl/mycert/fullchain.pem

# Use subcert= to add extra certificates for SNI processing

# Logs
accesslog-file=/var/log/nghttpx-access.log
errorlog-file=/var/log/nghttpx-error.log

# Record where the requests came from
strip-incoming-x-forwarded-for=yes
add-x-forwarded-for=yes
strip-incoming-forwarded=yes
add-forwarded=by,for,host,proto

# Don't hash forwarded-for stuff, use the actual information
forwarded-by=ip
forwarded-for=ip