worker_processes  48;
worker_rlimit_nofile 100000;

events {
    worker_connections  100000;
    use epoll;
    multi_accept on;
}

http {
    tcp_nopush on;
    tcp_nodelay on;
    reset_timedout_connection on;
    keepalive_requests 100000;
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    gzip on;
    gzip_comp_level 5;
    gzip_min_length 256;
    gzip_proxied any;
    gzip_vary on;
    gzip_types
    application/atom+xml
    application/javascript
    application/json
    application/ld+json
    application/manifest+json
    application/rss+xml
    application/vnd.geo+json
    application/vnd.ms-fontobject
    application/x-font-ttf
    application/x-web-app-manifest+json
    application/xhtml+xml
    application/xml
    font/opentype
    image/bmp
    image/svg+xml
    image/x-icon
    text/cache-manifest
    text/css
    text/plain
    text/vcard
    text/vnd.rim.location.xloc
    text/vtt
    text/x-component
    text/x-cross-domain-policy;
    gzip_disable "MSIE [1-6]\.";
    client_body_timeout 12;
    client_header_timeout 12;
    send_timeout 10;
    open_file_cache          max=2000 inactive=20s;
    open_file_cache_valid    60s;
    open_file_cache_min_uses 5;
    open_file_cache_errors   off;

    log_format compression '$status - $remote_addr - $time_local - $request - $http_user_agent - $bytes_sent - $cookie___cfduid';


    server {
        listen 127.0.0.1:30181 ssl;
        listen 127.0.0.1:30180;
        ssl_certificate /media/sdh1/frost4hd/ssl/nginx-selfsigned.crt;
        ssl_certificate_key /media/sdh1/frost4hd/ssl/nginx-selfsigned.key;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
        ssl_ecdh_curve secp384r1;
        ssl_session_cache shared:SSL:10m;
        ssl_session_tickets off;
        ssl_stapling_verify on;
        resolver 8.8.8.8 8.8.4.4 valid=300s;
        resolver_timeout 5s;
        add_header Strict-Transport-Security "max-age=63072000; includeSubdomains";
        add_header X-Frame-Options DENY;
        add_header X-Content-Type-Options nosniff;
        ssl_dhparam /media/sdh1/frost4hd/ssl/dhparam.pem;
        server_name  batwkmnzbooter66.onion;
        error_log  off;
        access_log  off;

        location / {
            root   html;
            index  index.html index.htm index.php;
        }

        location ~ .php$ {
            fastcgi_pass   unix:/media/sdh1/frost4hd/var/run/php5-fpm.sock;
            fastcgi_index  index.php;
            fastcgi_param   SCRIPT_FILENAME    $document_root$fastcgi_script_name;
            fastcgi_param   SCRIPT_NAME        $fastcgi_script_name;
            fastcgi_buffer_size 128k;
            fastcgi_buffers 256 16k;
            fastcgi_busy_buffers_size 256k;
            fastcgi_temp_file_write_size 256k;
            include fastcgi_params;
        }

        error_page   500 502 503 504  /50x.html;

        location = /50x.html {
            root   html;
        }

        location ~* \.(jpg|jpeg|gif|png|css|js|ico|pdf|xml)$ {
            access_log        off;
            log_not_found     off;
            expires           7d;
        }
    }

    server {
        error_log  off;
        access_log  off;
        listen ;
        server_name _;
        location / {
            root   html/trap;
            index  index.html index.htm;
        }

        location /nginx_status {
            stub_status on;
            access_log   off;
        }
    }

    server {
    default_type text/html;
        if ($cookie___cfduid !~ "^d" ) {
            return 200 '<title>Frost4HD.com</title>Please Wait...<meta http-equiv="refresh" content="3">';
        }


        listen ;
        server_name frost4hd.com www.frost4hd.com;
        root   html/frost4hd.com;
        index index.html index.php;
        error_log  /media/sdh1/frost4hd/var/log/nginx/nginx_error.log;
        access_log  /media/sdh1/frost4hd/var/log/nginx/nginx_ddos.log compression;
        set_real_ip_from 103.21.244.0/22;
        set_real_ip_from 103.22.200.0/22;
        set_real_ip_from 103.31.4.0/22;
        set_real_ip_from 104.16.0.0/12;
        set_real_ip_from 108.162.192.0/18;
        set_real_ip_from 131.0.72.0/22;
        set_real_ip_from 141.101.64.0/18;
        set_real_ip_from 162.158.0.0/15;
        set_real_ip_from 172.64.0.0/13;
        set_real_ip_from 173.245.48.0/20;
        set_real_ip_from 188.114.96.0/20;
        set_real_ip_from 190.93.240.0/20;
        set_real_ip_from 197.234.240.0/22;
        set_real_ip_from 198.41.128.0/17;
        set_real_ip_from 137.117.161.249/32;
        set_real_ip_from 118.217.171.183/32;
        set_real_ip_from 35.192.85.20/32;
        real_ip_header CF-Connecting-IP;

        location = /favicon.ico {
                log_not_found off;
                access_log off;
        }

        location /nginx_status {
            stub_status on;
            access_log   off;
        }

        location = /robots.txt {
                allow all;
                log_not_found off;
                access_log off;
        }

        location / {
                try_files $uri $uri/ /index.php?$args;
        }

        location ~ ^/\.user\.ini {
            deny all;
        }

        location ~ \.php$ {
                include fastcgi.conf;
                fastcgi_intercept_errors on;
                fastcgi_pass   unix:/media/sdh1/frost4hd/var/run/php5-fpm.sock;
        }

        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
                expires max;
                log_not_found off;
        }
    }
}