Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Configure Nginx for reverse proxy, load balancing, SSL termination, and high-performance static serving.
Configure Nginx for reverse proxy, load balancing, SSL termination, and high-performance static serving.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
User needs Nginx expertise โ from basic server blocks to production configurations. Agent handles reverse proxy, SSL, caching, and performance tuning.
TopicFileReverse proxy patternsproxy.mdSSL/TLS configurationssl.mdPerformance tuningperformance.mdCommon configurationsexamples.md
Exact = first, then ^~ prefix, then regex ~/~*, then longest prefix location /api matches /api, /api/, /api/anything โ prefix match location = /api only matches exactly /api โ not /api/ location ~ \.php$ is regex, case-sensitive โ ~* for case-insensitive ^~ stops regex search if prefix matches โ use for static files
proxy_pass http://backend preserves location path โ /api/users โ /api/users proxy_pass http://backend/ replaces location path โ /api/users โ /users Common mistake: missing slash = double path โ or unexpected routing Test with curl -v to see actual backend request
try_files $uri $uri/ /index.html for SPA โ checks file, then dir, then fallback Last argument is internal redirect โ or =404 for error $uri/ tries directory with index โ set index index.html Don't use for proxied locations โ use proxy_pass directly
proxy_set_header Host $host โ backend sees original host, not proxy IP proxy_set_header X-Real-IP $remote_addr โ client IP, not proxy proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for โ append to chain proxy_set_header X-Forwarded-Proto $scheme โ for HTTPS detection
Define servers in upstream block โ upstream backend { server 127.0.0.1:3000; } proxy_pass http://backend uses upstream โ load balancing included Health checks with max_fails and fail_timeout โ marks server unavailable keepalive 32 for connection pooling โ reduces connection overhead
ssl_certificate is full chain โ cert + intermediates, not just cert ssl_certificate_key is private key โ keep permissions restricted ssl_protocols TLSv1.2 TLSv1.3 โ disable older protocols ssl_prefer_server_ciphers on โ server chooses cipher, not client
nginx -t before nginx -s reload โ test config first Missing semicolon โ syntax error, vague message root inside location โ prefer in server, override only when needed alias vs root โ alias replaces location, root appends location Variables in if โ many things break inside if, avoid complex logic
$uri is decoded, normalized path โ /foo%20bar becomes /foo bar $request_uri is original with query string โ unchanged from client $args is query string โ $arg_name for specific parameter $host from Host header โ $server_name from config
worker_processes auto โ matches CPU cores worker_connections 1024 โ per worker, multiply by workers for max sendfile on โ kernel-level file transfer gzip on only for text โ gzip_types text/plain application/json ... gzip_min_length 1000 โ small files not worth compressing
access_log off for static assets โ reduces I/O Custom log format with log_format โ add response time, upstream time error_log level: debug, info, warn, error โ debug is verbose Conditional logging with map and if โ skip health checks
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.