5 Nov 2015

nginx

server_tokens off;

listen 443 ssl;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ‘EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH’;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/nginx/ssl/dhparam.pem;
ssl_certificate /etc/nginx/ssl/nginx.crt;
ssl_certificate_key /etc/nginx/ssl/nginx.key;

Performance thread pool

X-forwarded-for
nginx.conf: http{}

set_real_ip_from 127.0.0.1;
set_real_ip_from 10.0.69.120; # ip proxy
  
real_ip_header X-Forwarded-For;
real_ip_recursive on;