da4138e3f5
The following are included in the switch to strict confinement: * Set snapcraft.yaml confinement to strict and restore/update plugs * Drop building of python as it's not required for strict snaps * Switch back to running apps under root * Patch setgroups from ngnix since it's not covered by a plug * Build libxml into snap Change-Id: Ibd2e3c625ceb92cb4b6dd9f0c9a9012baf7c53a5
40 lines
794 B
Django/Jinja
40 lines
794 B
Django/Jinja
user root root;
|
|
worker_processes auto;
|
|
pid {{ snap_common }}/run/nginx.pid;
|
|
|
|
events {
|
|
worker_connections 768;
|
|
}
|
|
|
|
http {
|
|
##
|
|
# Basic Settings
|
|
##
|
|
|
|
sendfile on;
|
|
tcp_nopush on;
|
|
tcp_nodelay on;
|
|
keepalive_timeout 65;
|
|
types_hash_max_size 2048;
|
|
|
|
include {{ snap }}/usr/conf/mime.types;
|
|
default_type application/octet-stream;
|
|
|
|
##
|
|
# Logging Settings
|
|
##
|
|
|
|
access_log {{ snap_common }}/log/nginx-access.log;
|
|
error_log {{ snap_common }}/log/nginx-error.log;
|
|
|
|
##
|
|
# Gzip Settings
|
|
##
|
|
|
|
gzip on;
|
|
gzip_disable "msie6";
|
|
|
|
include {{ snap_common }}/etc/nginx/conf.d/*.conf;
|
|
include {{ snap_common }}/etc/nginx/snap/sites-enabled/*;
|
|
}
|