user www-data;
worker_processes 4;
pid /var/run/nginx.pid;

events {
        worker_connections 16384;
        multi_accept on;
        use epoll;
}
        worker_rlimit_nofile 32768;

http {
        sendfile on;
        aio threads;
        server_tokens off;
        sendfile_max_chunk 32k;

        tcp_nopush on;
        tcp_nodelay on;

        client_header_timeout 12s;
        client_header_buffer_size 1k;

        client_body_buffer_size 128K;
        client_body_timeout 12s;

        client_max_body_size 1m;
        large_client_header_buffers 4 4k;

        open_file_cache max=32768 inactive=20s;
        open_file_cache_valid 30s;
        open_file_cache_min_uses 2;
        open_file_cache_errors on;

        keepalive_timeout 15s;
        keepalive_requests 100;

        reset_timedout_connection on;
        send_timeout 10s;

        types_hash_max_size 2048;
        server_names_hash_max_size 2048;
        variables_hash_max_size 2048;

        include /etc/nginx/mime.types;
        default_type application/octet-stream;

        access_log off;
        error_log /var/log/nginx/error.log crit;

        expires max;

        charset UTF-8;

        gzip on;
        gzip_min_length 10240;
        gzip_disable msie6;
        gzip_vary on;
        gzip_proxied any;
        gzip_comp_level 3;
        gzip_http_version 1.1;
        gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml applicat$

        fastcgi_ignore_client_abort on;
        fastcgi_send_timeout 10s;
        fastcgi_pass_header Cookie;
        fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
        fastcgi_cache_key $scheme$request_method$http_if_modified_since$http_if_none_match$host$request_uri;
        fastcgi_cache_path /var/cache/nginx/ levels=1:2 keys_zone=fastcgi_cache:1m max_size=128m inactive=1h;

        limit_req_zone $binary_remote_addr zone=limit_req:64m rate=2r/s;
        limit_req_status 403;

        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
}