varnish-nginx-ssl-config-hitratio-in-varnishstat-high

server {
    server_name www.example.com;
    ssl_certificate_key /var/www/example.com/area51/theauthoritativegenerated.key;
    ssl_certificate /var/www/example.com/hopefullystoredstapledandpinnedtoyourbrowsersomyserverloadviasslhandshakedoesntgonuts/themagicsignedcertverifiedbyemailautomaticallyandsubsequentlycharginyour100bucks.crt;
    listen               *:8080;
    listen               *:443 ssl spdy;
    listen               [::]:80 ipv6only=on;
    listen               [::]:443 ssl spdy ipv6only=on;
    return 301 $scheme://www.anothersecurefqdnexample.com$request_uri;
}

server {
    server_name          example.com;
    listen               *:8080;
    listen               [::]:8080;

    return 301 $scheme://thesecureexample.com$request_uri;
}
server {
    server_name          mail.example.com;
    listen               *:8080;
    listen               [::]:8080;
    ssl off;
    return 302 http://mail.example.com;
}


server {
  server_name jurisdesk.com ##(need-to-advertise-myboys)##;
  listen               *:443 ssl spdy;
  listen               [::]:443 ssl spdy;
  ssl_stapling on;
  ssl_stapling_verify on;
  resolver 8.8.8.8 8.8.4.4 valid=300s;
  resolver_timeout 5s;
  ssl_certificate_key /var/www/example.com/somesecurearea53location/asillycrytographickeygeneratedbyopensslandsignedbytheinternetpolice.key;
  ssl_certificate /var/www/example.com/therainbowinyourbrowserstorage/acertthatincludedthecacertandforawhoppingaplussslratingrootcert-concencated.crt;
  access_log /var/log/nginx/example.com.access.log jb_cache_redis;
  error_log /var/log/nginx/example.com.error.log;
  root /var/www/example.com/htdocs;

  index index.php index.html index.htm;

  include  common/wpfc-hhvm.conf;
  include rocket-nginx/rocket-nginx.conf;

  include common/wpcommon.conf;
  include common/locations.conf;

location ~ /var/www/example.com/htdocs/wp-content/uploads/2015 {

location ~ /var/www/example.com/htdocs/wp-content/uploads/2015 {
    proxy_pass http://127.0.0.1:8080;
    proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_redirect off;
        proxy_buffering   off;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        add_header Access-Control-Allow-Origin "*";
}
  location ~ \.(ttf|ttc|otf|eot|woff|woff2|font.css|css|js)$ {
          add_header Access-Control-Allow-Origin "*";
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

          proxy_redirect off;
          proxy_buffering   off;

          proxy_http_version 1.1;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";

          proxy_pass http://127.0.0.1:8080;

 }

}