|
2 | 2 | # not accept more consecutive clients than what copyparty is able to;
|
3 | 3 | # nginx default is 512 (worker_processes 1, worker_connections 512)
|
4 | 4 | #
|
| 5 | +# ====================================================================== |
| 6 | +# |
| 7 | +# to reverse-proxy a specific path/subpath/location below a domain |
| 8 | +# (rather than a complete subdomain), for example "/qw/er", you must |
| 9 | +# run copyparty with --rp-loc /qw/as and also change the following: |
| 10 | +# location / { |
| 11 | +# proxy_pass http://cpp_tcp; |
| 12 | +# to this: |
| 13 | +# location /qw/er/ { |
| 14 | +# proxy_pass http://cpp_tcp/qw/er/; |
| 15 | +# |
| 16 | +# ====================================================================== |
| 17 | +# |
5 | 18 | # rarely, in some extreme usecases, it can be good to add -j0
|
6 | 19 | # (40'000 requests per second, or 20gbps upload/download in parallel)
|
7 | 20 | # but this is usually counterproductive and slightly buggy
|
8 | 21 | #
|
| 22 | +# ====================================================================== |
| 23 | +# |
9 | 24 | # on fedora/rhel, remember to setsebool -P httpd_can_network_connect 1
|
10 | 25 | #
|
11 |
| -# if you are behind cloudflare (or another protection service), |
| 26 | +# ====================================================================== |
| 27 | +# |
| 28 | +# if you are behind cloudflare (or another CDN/WAF/protection service), |
12 | 29 | # remember to reject all connections which are not coming from your
|
13 | 30 | # protection service -- for cloudflare in particular, you can
|
14 | 31 | # generate the list of permitted IP ranges like so:
|
15 | 32 | # (curl -s https://www.cloudflare.com/ips-v{4,6} | sed 's/^/allow /; s/$/;/'; echo; echo "deny all;") > /etc/nginx/cloudflare-only.conf
|
16 | 33 | #
|
17 | 34 | # and then enable it below by uncomenting the cloudflare-only.conf line
|
| 35 | +# |
| 36 | +# ====================================================================== |
18 | 37 |
|
19 | 38 |
|
20 | 39 | upstream cpp_tcp {
|
|
0 commit comments