Nginx notes

• Whitelist IP

server {
    listen 80;
    listen [::]:80;

    server_name _;

    error_log  /var/log/nginx/error.log;
    access_log /var/log/nginx/access.log;

    allow x.x.x.x;
    allow y.y.y.y;
    deny all;

    location / {
        root /var/www/html;
    }
}

• Show list file in folder

server {
    listen 80;
    listen [::]:80;

    server_name ;

    error_log  /var/log/nginx/error.log;
    access_log /var/log/nginx/access.log;

    location / {
        root /files;
        autoindex on;
        autoindex_exact_size off;
        autoindex_format html;
        autoindex_localtime on;
    }
}

• Set real ip in nginx ( through cloudflare )

server {
    listen 80;
    listen [::]:80;

    server_name _;

    error_log  /var/log/nginx/error.log;
    access_log /var/log/nginx/access.log;

    location = /robots.txt {
        alias /etc/nginx/conf.d/robots.txt;
    }

    # set real ip from cloudflare
    set_real_ip_from a.b.c.d/0;
    real_ip_header X-Forwarded-For;
    real_ip_recursive on;

    location / {
        root /var/www/html;
    }
}

• Set default nginx not load domain not in server_name

server {
    listen 80 default_server;
    listen [::]:80 default_server;
    server_name _;
    return 444;
}

server {
    listen 443 ssl default_server;
    listen [::]:443 ssl default_server;
    server_name _;
    ssl_certificate /etc/letsencrypt/live/<domain_name>/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/<domain_name>/privkey.pem;
    return 444;
}