vod-cdn/nginx.conf at master · RallyPoint/vod-cdn · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
worker_processes  auto;

events {
	use epoll;
}

http {


	# proxy
	proxy_redirect off;
	proxy_http_version 1.1;
	proxy_read_timeout 10s;
	proxy_send_timeout 10s;
	proxy_connect_timeout 10s;
	proxy_cache_path /tmp/cache/nginx/live_cache_temp use_temp_path=off keys_zone=live_cache_temp:10m max_size=20g inactive=10m;
	proxy_cache live_cache_temp;
	proxy_cache_methods GET HEAD;
	proxy_cache_key $uri;
	proxy_cache_valid 200 302 1s;
	proxy_cache_valid 404 3s;
	proxy_cache_lock on;
	proxy_cache_lock_age 5s;
	proxy_cache_lock_timeout 1h;
	proxy_ignore_headers Cache-Control;
	proxy_ignore_headers Set-Cookie;
	proxy_ssl_server_name on;

	server {
		listen 80;
		listen 443 ssl;
		server_name vod01.rallypoint.tech vod02.rallypoint.tech;
		root /opt/static/hls/replay;


		ssl_certificate    /usr/local/nginx/ssl/cert.pem;
		ssl_certificate_key    /usr/local/nginx/ssl/privkey.pem;

		access_log  off;
		error_log   stderr;


		default_type  application/octet-stream;
		include       /usr/local/nginx/conf/mime.types;

		sendfile    on;
		tcp_nopush  on;
		tcp_nodelay on;

		vod_mode                           local;
		vod_metadata_cache                 metadata_cache 16m;
		vod_response_cache                 response_cache 512m;
		vod_last_modified_types            *;
		vod_segment_duration               9000;
		vod_align_segments_to_key_frames   on;
		vod_dash_fragment_file_name_prefix "segment";
		vod_hls_segment_file_name_prefix   "segment";

		vod_manifest_segment_durations_mode accurate;

		open_file_cache          max=1000 inactive=5m;
		open_file_cache_valid    2m;
		open_file_cache_min_uses 1;
		open_file_cache_errors   on;

		aio on;

		location ~ ^/videos/.+$ {
			autoindex on;
		}

		location /hls/ {
			vod hls;
			alias /opt/static/hls/replay/;
			add_header Access-Control-Allow-Headers '*';
			add_header Access-Control-Allow-Origin '*';
			add_header Access-Control-Allow-Methods 'GET, HEAD, OPTIONS';
		}

		location /thumb/ {
			vod thumb;
			alias /opt/static/hls/replay/;
			add_header Access-Control-Allow-Headers '*';
			add_header Access-Control-Allow-Origin '*';
			add_header Access-Control-Allow-Methods 'GET, HEAD, OPTIONS';
		}

		location /dash/ {
			vod dash;
			alias /opt/static/hls/replay/;
			add_header Access-Control-Allow-Headers '*';
			add_header Access-Control-Allow-Origin '*';
			add_header Access-Control-Allow-Methods 'GET, HEAD, OPTIONS';
		}
	}


	# default route
	server {
		listen 80;
		listen 443 ssl;
		server_name live01.rallypoint.tech live02.rallypoint.tech;

		ssl_certificate    /usr/local/nginx/ssl/cert.pem;
		ssl_certificate_key    /usr/local/nginx/ssl/privkey.pem;

		# basic
		sendfile on;
		tcp_nopush on;
		tcp_nodelay on;
		server_tokens off;
		keepalive_timeout 300s;
		types_hash_max_size 2048;
		default_type application/octet-stream;
		include       /usr/local/nginx/conf/mime.types;


		# logs
		access_log  off;
		error_log /dev/stdout;

		# gzip
		gzip on;
		gzip_disable "msie6";
		gzip_http_version 1.1;
		gzip_comp_level 6;
		gzip_types text/plain text/css application/json application/javascript text/javascript application/x-javascript text/xml application/xml application/xml+rss application/vnd.ms-fontobject application/x-font-ttf font/opentype font/x-woff image/svg+xml image/x-icon;


		add_header X-Cache-Status $upstream_cache_status;
		# Ajouter les headers de contrôle d'accès CORS
		add_header    'Access-Control-Allow-Origin' '*' always;
		add_header    'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
		add_header    'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept' always;
		add_header    'Access-Control-Allow-Credentials' 'true' always;

		location ~ \.(m3u8|mpd)$ {
			proxy_cache_valid 200 302 1s;
			if ($request_uri ~* "/server/(.*)/(.*)$") {
				proxy_pass  http://$1/$2;
			}
		}

		location / {
			if ($request_uri ~* "\/server\/(.*)\/(.*)") {
				proxy_pass  http://$1/$2;
			}
		}
	}
}