Enhance Nginx configuration with improved error logging and caching mechanisms

Author: mbuechner

config/nginx/nginx.conf

@@ -5,7 +5,7 @@ load_module modules/ngx_http_brotli_static_module.so;
 # user                            nobody;
 daemon                          off;
 worker_processes                auto;
-error_log                       stderr info;
+error_log                       /dev/stderr info;
 
 events {
     worker_connections          1024;
@@ -16,7 +16,14 @@ http {
     include                     /etc/nginx/mime.types;
     default_type                application/octet-stream;
 
-    access_log                  stdout combined;
+    log_format                  main_timing '$remote_addr - $remote_user [$time_local] '
+                                          '"$request" $status $body_bytes_sent '
+                                          'rt=$request_time urt=$upstream_response_time '
+                                          'ust=$upstream_status uaddr=$upstream_addr '
+                                          'xff="$http_x_forwarded_for" ua="$http_user_agent" '
+                                          'cache="$upstream_cache_status"';
+
+    access_log                  /dev/stdout main_timing;
 
     proxy_connect_timeout       600s;
     proxy_send_timeout          600s;
@@ -128,6 +135,19 @@ http {
     limit_req_zone              $binary_remote_addr zone=drupal_heavy:20m rate=1r/s;
     limit_conn_zone             $binary_remote_addr zone=perip_conn:20m;
 
+    fastcgi_cache_path          /var/cache/nginx/fastcgi_cache levels=1:2 keys_zone=drupal_microcache:50m inactive=60m max_size=500m;
+
+    map $request_method $drupal_cache_bypass_method {
+        default                 1;
+        GET                     0;
+        HEAD                    0;
+    }
+
+    map $http_cookie $drupal_cache_bypass_cookie {
+        default                 0;
+        ~*"(S?SESS)[0-9a-zA-Z]+" 1;
+    }
+
     add_header                  X-XSS-Protection '1; mode=block';
     add_header                  X-Frame-Options SAMEORIGIN;
     add_header                  X-Content-Type-Options nosniff;

config/nginx/preset.conf

@@ -104,6 +104,15 @@ location / {
 location @drupal {
     limit_conn perip_conn 10;
     limit_req  zone=drupal_rps burst=30 nodelay;
+
+    fastcgi_cache           drupal_microcache;
+    fastcgi_cache_key       "$scheme$request_method$host$request_uri";
+    fastcgi_cache_valid     200 301 302 10s;
+    fastcgi_cache_valid     404 1s;
+    fastcgi_cache_bypass    $drupal_cache_bypass_method $drupal_cache_bypass_cookie $http_authorization $query_string;
+    fastcgi_no_cache        $drupal_cache_bypass_method $drupal_cache_bypass_cookie $http_authorization $query_string;
+    add_header              X-Cache $upstream_cache_status always;
+
     include fastcgi.conf;
     fastcgi_param QUERY_STRING $query_string;
     fastcgi_param SCRIPT_NAME /index.php;
@@ -114,6 +123,15 @@ location @drupal {
 location @drupal-no-args {
     limit_conn perip_conn 10;
     limit_req  zone=drupal_rps burst=30 nodelay;
+
+    fastcgi_cache           drupal_microcache;
+    fastcgi_cache_key       "$scheme$request_method$host$request_uri";
+    fastcgi_cache_valid     200 301 302 10s;
+    fastcgi_cache_valid     404 1s;
+    fastcgi_cache_bypass    $drupal_cache_bypass_method $drupal_cache_bypass_cookie $http_authorization;
+    fastcgi_no_cache        $drupal_cache_bypass_method $drupal_cache_bypass_cookie $http_authorization;
+    add_header              X-Cache $upstream_cache_status always;
+
     include fastcgi.conf;
     fastcgi_param QUERY_STRING q=$uri;
     fastcgi_param SCRIPT_NAME /index.php;
@@ -124,6 +142,15 @@ location @drupal-no-args {
 location = /index.php {
     limit_conn perip_conn 10;
     limit_req  zone=drupal_rps burst=30 nodelay;
+
+    fastcgi_cache           drupal_microcache;
+    fastcgi_cache_key       "$scheme$request_method$host$request_uri";
+    fastcgi_cache_valid     200 301 302 10s;
+    fastcgi_cache_valid     404 1s;
+    fastcgi_cache_bypass    $drupal_cache_bypass_method $drupal_cache_bypass_cookie $http_authorization $query_string;
+    fastcgi_no_cache        $drupal_cache_bypass_method $drupal_cache_bypass_cookie $http_authorization $query_string;
+    add_header              X-Cache $upstream_cache_status always;
+
     fastcgi_pass php;
 }