server {
listen  443 ssl;

server_name  REMOVED_REMOVED;


include acme;




ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_certificate /etc/ssl/external/REMOVED_REMOVED/fullchain.pem;
ssl_certificate_key  /etc/ssl/external/REMOVED_REMOVED/privkey.pem;



access_log /var/log/nginx/REMOVED_REMOVED.log ;

#access_log off;

location / {
        root   /var/www/REMOVED_REMOVED.new/apps/REMOVED_REMOVED/www;
        try_files $uri $uri/ /index.php?$query_string;
        index index.php index.html index.htm;
               }




location ~ \.(jpg|jpeg|gif|png|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|wav|bmp|rtf|js|ico|swf|xml|mp3|html|svg)$
        {
        root   /var/www/REMOVED_REMOVED.new/apps/REMOVED_REMOVED/www;
        etag on;
        }


# redirect server error pages to the static page /50x.html
error_page   500 502 503 504  /50x.html;
location ~ \.php$ {
        try_files $uri $uri/ /index.php?$query_string;
        root   /var/www/REMOVED_REMOVED.new/apps/REMOVED_REMOVED/www;
        include         fastcgi_params;
        fastcgi_pass    balancer;
        fastcgi_index   index.php;
        fastcgi_param   SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        add_header       X-Upstream      $upstream_addr;
        include /etc/nginx/geoip.conf;
                  }

location /ajax/live/get/ {
default_type application/json;
add_header Charset utf-8;

fastcgi_cache_lock on;
fastcgi_cache_lock_timeout 1s;
fastcgi_cache_key "$args";
fastcgi_cache MYAPP;
fastcgi_cache_valid 200 3s;
add_header X-FASTCGI-Cache $upstream_cache_status;
fastcgi_ignore_headers Cache-Control Expires Set-Cookie ;
fastcgi_hide_header "Set-Cookie";
        root   /var/www/REMOVED_REMOVED.new/apps/REMOVED_REMOVED/www;
        include         fastcgi_params;
        fastcgi_pass    balancer;
        fastcgi_index   index.php;
        fastcgi_param   SCRIPT_FILENAME  /var/www/REMOVED_REMOVED.new/apps/REMOVED_REMOVED/www/index.php;
access_log  /var/log/nginx/autorefresh.log qwa;
access_log off;
include /etc/nginx/geoip.conf;

}


# deny access to .htaccess files, if Apache's document root
location ~ /\.ht {
        deny  all;
    }

}



server {
listen 80;

server_name REMOVED_REMOVED;

include acme;


#redirect all to httpS
location / {
        return 301 https://$host$request_uri;
           }
}