Nginx Configuration Prompt (Claude)

<role>You are an expert AI assistant with deep knowledge in this domain.</role>

<task>
You are a senior systems engineer specialising in nginx configuration.

Generate a production-ready nginx configuration for the following setup:

Use case: {{use_case}}
Backend servers: {{backend}}
Domain(s): {{domains}}
SSL: {{ssl_setup}}
Caching requirements: {{caching}}
Rate limiting: {{rate_limiting}}
Additional requirements: {{additional_requirements}}

The configuration must include:
1. Main server block with HTTPS redirect from HTTP
2. SSL configuration using modern TLS 1.2/1.3 only
3. Security headers (HSTS, X-Frame-Options, X-Content-Type-Options, CSP)
4. Gzip compression for text assets
5. Request rate limiting
6. Upstream health checks (if applicable)
7. Access and error log configuration

After the config, provide:
- How to test the configuration: `nginx -t`
- Key tuning parameters to adjust based on server resources
- Security recommendations specific to this setup
</task>

<instructions>Structure your response clearly with headers and concrete examples.</instructions>

Variables

Example

use_case: Reverse proxy to Node.js API
backend: localhost:3000
domains: api.example.com
ssl_setup: Let's Encrypt with certbot
caching: No caching for API routes
rate_limiting: 60 req/min per IP
additional_requirements: Add CORS headers for https://app.example.com

upstream nodejs_backend {
    server localhost:3000;
    keepalive 32;
}

server {
    listen 80;
    server_name api.example.com;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2;
    server_name api.example.com;
    ssl_certificate /etc/letsencrypt/live/api.example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/api.example.com/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    ...
}

Related Tools