user www-data;
worker_processes 2;

#error_log    /var/log/nginx/logs/error.log;
#error_log   /var/log/nginx/logs/error.log  notice;
#error_log   /var/log/nginx/logs/error.log  info;
#access_log  off;
#pid        logs/nginx.pid;


events {
    worker_connections  2048;
}


http {

        access_log  off;
        include       mime.types;
        default_type  application/octet-stream;

        sendfile        on;
        tcp_nopush     on;

        #keepalive_timeout  0;
        keepalive_timeout  65;

        client_body_buffer_size 124K;
        client_header_buffer_size 1k;
        client_max_body_size 100m;
        large_client_header_buffers 4 32k;

	ssl_session_cache   shared:SSL:10m;
        ssl_session_timeout 10m;
	ssl_prefer_server_ciphers On;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

	map $http_cf_ipcountry $allow {
        default yes;
        IN no;
        CN no;
        PK no;
	RU no;
	BD no;
	UA no;
}


        gzip on;
        #	gunzip on;
	    gzip_static on;
        gzip_disable "msie6";
        gzip_vary on;
	    gzip_proxied any;
        gzip_comp_level 6;
        gzip_buffers 16 8k;
        gzip_http_version 1.1;
        gzip_types application/json application/x-javascript application/xml text/javascript text/plain text/css application/javascript text/xml application/xml+rss;
	include /etc/nginx/blacklist.conf
	include /etc/nginx/domain.com.ssl;
#	include /etc/nginx/uk.domain.com;
#	include /etc/nginx/ca.domain.com;
#	include /etc/nginx/au.domain.com;
	include /etc/nginx/anotherdomain.com;
	include /etc/nginx/refer-spam.conf;
}