Page Menu
Home
Phabricator
Search
Configure Global Search
Log In
Files
F23472337
No One
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Flag For Later
Authored By
•
chasemp
Jul 8 2018, 7:11 PM
2018-07-08 19:11:07 (UTC+0)
Size
2 KB
Referenced Files
None
Subscribers
None
View Options
##########################
# This file is maintained by puppet!
# modules/dumps/templates/web/xmldumps/nginx.conf.erb
##########################
limit_conn_zone $remote_addr$http_user_agent zone=addr:10m;
server {
listen [::]:80 default ipv6only=off;
server_name dumps.wikimedia.org;
return 301 https://dumps.wikimedia.org$request_uri;
}
server {
listen [::]:443 default ssl ipv6only=off;
server_name dumps.wikimedia.org;
include /etc/acme/challenge-nginx.conf;
ssl_certificate /etc/acme/cert/dumps.chained.crt;
ssl_certificate_key /etc/acme/key/dumps.key;
ssl_session_cache shared:SSL:50m;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers -ALL:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-256-GCM-SHA384:TLS13-AES-128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA;
ssl_ecdh_curve X25519:prime256v1;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/ssl/dhparam.pem;
add_header Strict-Transport-Security "max-age=106384710; includeSubDomains; preload" always;
root /srv/dumps/xmldatadumps/public;
location / {
index index.html index.htm;
autoindex on;
charset utf-8;
limit_rate 1048k;
limit_rate_after 1m;
limit_conn addr 2;
}
rewrite ^/other/(iOS|PlayBook|win8|android)(|/.*)$ $scheme://releases.wikimedia.org/mobile/$1$2 break;
rewrite ^/(other/)?mediawiki(|/.*)$ $scheme://releases.wikimedia.org/mediawiki$2 break;
rewrite ^/fundraising(|/.*)$ /other/fundraising$1 permanent;
rewrite ^/analytics(|/.*)$ /other/analytics$1 permanent;
# for now we proxy for html (restbase) dumps
location /htmldumps {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header Proxy ""; # https://httpoxy.org/
proxy_pass http://francium.eqiad.wmnet;
limit_rate 4192k;
limit_rate_after 1m;
limit_conn addr 3;
}
}
File Metadata
Details
Attached
Mime Type
text/plain; charset=utf-8
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
6113221
Default Alt Text
(2 KB)
Attached To
Mode
P7334 (An Untitled Masterwork)
Attached
Detach File
Event Timeline
Log In to Comment