bantikov.conf

upstream bantikov_server {
    server unix:/data/bantikov/shared/unicorn.socket fail_timeout=0;
}
# non-www to www
server {
    listen       80;
    listen 443 ssl;

    ssl_certificate     /data/bantikov/shared/2017_crt/bant_ssl/bundle.crt;
    ssl_certificate_key /data/bantikov/shared/2017_crt/bant_ssl/bantikov.key;

    server_name  bantikov.ru msk.bantikov.ru spb.bantikov.ru ekb.bantikov.ru chl.bantikov.ru perm.bantikov.ru krs.bantikov.ru;
    return       301 https://www.bantikov.ru$request_uri;
}

#server {
#    listen 178.79.188.33:443;
#    server_name bantikov.ru;
#    ssl                  on;
#    ssl_certificate     /data/bantikov/shared/crt/certificate_bundled.crt;
#    ssl_certificate_key /data/bantikov/shared/crt/private.key;

#     #rewrite ^/(.+) http://www.bantikov.ru/$1 permanent;
#}



server {
    #listen 80;
    listen 443 ssl;

    ssl_certificate     /data/bantikov/shared/2017_crt/bant_ssl/bundle.crt;
    ssl_certificate_key /data/bantikov/shared/2017_crt/bant_ssl/bantikov.key;

    server_name 178.79.188.33 www.bantikov.ru;

    client_body_buffer_size 1K;
    client_header_buffer_size 1k;
    client_max_body_size 10M;
    large_client_header_buffers 4 32k;

    client_body_timeout 600;
    client_header_timeout 600;
    keepalive_timeout 5;
    send_timeout 10;


    if ($request_method !~ ^(GET|HEAD|POST)$ ) {
        return 444;
    }

    location /admin {
        return 444;
    }


    root /data/bantikov/current/public;
    access_log /data/bantikov/shared/log/access.log;
    error_log  /data/bantikov/shared/log/error.log;

    try_files $uri/index.html $uri.html $uri @bantikov_web;

    location  @bantikov_web  {
            proxy_pass http://bantikov_server;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Host $http_host;
            proxy_redirect off;
            proxy_read_timeout          500;

            client_max_body_size       7M;
            root /data/bantikov/current/public;

            gzip on;
            gzip_min_length  1024;
            gzip_comp_level 8;
            gzip_http_version 1.0;
            gzip_buffers 16 8k;
            gzip_proxied any;
            gzip_disable        "MSIE [1-6]\.";
            gzip_types      text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript text/json;
            gzip_vary on;
    }

    location ^~ /admin/ {
        deny all;
    }

    location ~^/(assets)/ {
                root /data/bantikov/current/public;
                gzip_static on; # to serve pre-gzipped version
                expires max;
                add_header Last-Modified "";
                add_header ETag "";
                add_header Cache-Control public;
                break;
   }

    location = /favicon.ico {
        log_not_found off;
        access_log    off;
    }

    location = /robots.txt {
        allow         all;
        log_not_found off;
        access_log    off;
    }

    location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
        expires       max;
        log_not_found off;
    }

}