#user  nobody;
worker_processes  6;

#error_log  logs/error.log;
#error_log  logs/error.log  info;
error_log  /var/log/nginx/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;
    rewrite_log  on;

    sendfile        on;
    tcp_nopush     on;
    tcp_nodelay	   on;

    #keepalive_timeout  0;
    keepalive_timeout  75;
    keepalive_requests 500;

    gzip  on;
    gzip_types text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;

    server_name_in_redirect on;

    server {
        listen 80 default;
        server_name _;
        rewrite ^(.*) http://my.example.net$1 permanent;
    }

    server {
        listen       80;
        server_name  my.example.net;
      	root /usr/local/ # Commented out for brevity

        #charset koi8-r;

        access_log  /var/log/access.log  main;

	      try_files $uri /$uri;

        location ~ ^/\d+/(css|js|images)/(.*)$ {
            expires 7d;
            access_log off;
            alias /usr/local/ # Commented out for brevity
        }

        location / {
	        index index.php;
		# Commented out for brevity
        }
        location ~ .php$ {
            fastcgi_pass unix:/var/run/php-fpm.sock;
	          fastcgi_index index.php;
            include /etc/nginx/fastcgi_params;
        }


        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

    }


    server {
        listen 443 default;
        server_name _;
        rewrite ^(.*) https://my.example.net$1 permanent;
    }

    server {
        listen 443;
        server_name  my.example.net;

        ssl                  on;
        ssl_certificate      /root/certs/ # Commented out for brevity
        ssl_certificate_key  /root/certs/ # Commented out for brevity

        ssl_session_timeout  5m;

        ssl_protocols  SSLv2 SSLv3 TLSv1;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;

        #charset koi8-r;

        access_log  /var/log/nginx/access.log  main;
        root   /usr/local/  # Commented out for brevity

        try_files $uri /$uri;

        location /admin/ {
            auth_basic  "Restricted";
            auth_basic_user_file /usr/local/ # Commented out for brevity
            index index.php;
        }
        location ~ ^/\d+/(css|js|images)/(.*)$ {
            expires 7d;
            access_log off;
            alias /usr/local/ # Commented out for brevity
        }

        location / {
            index index.php;
	    # Commented out for brevity
        }
        location ~* ^.+\.(css|js|png|gif|jpeg|jpg)$ {
            expires 7d;
            access_log off;
        }
        location ~ \.php$ {
            fastcgi_pass unix:/var/run/php-fpm.sock;
            fastcgi_index index.php;
            fastcgi_param  SCRIPT_FILENAME  /usr/local/ # Commented out for brevity
            fastcgi_connect_timeout 60;
            fastcgi_send_timeout 60;
            fastcgi_read_timeout 60;
            fastcgi_buffer_size 128k;
            fastcgi_buffers 4 256k;
            fastcgi_busy_buffers_size 256k;
            fastcgi_temp_file_write_size 256k;
            fastcgi_intercept_errors on;

            include /etc/nginx/fastcgi_params;
        }
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
        error_page  404              /404.html;
    }

}