worker_processes 1;
daemon off;

events {
    worker_connections 1024;
}

http {

    # Basic Settings
    include /home/jarmahent/deco3/mime.types;
    default_type application/octet-stream;

    sendfile                on;
    tcp_nopush              on;
    tcp_nodelay             on;
    keepalive_timeout       65;
    types_hash_max_size     2048;
    client_max_body_size    50m;
    server_tokens           off;

    # PROXY SETTINGS

    proxy_set_header        REAL_REMOTE_ADDR        $remote_addr;
    proxy_set_header        REAL_HTTP_HOST          $http_host;
    proxy_set_header        X_FORWARDED_FOR         $proxy_add_x_forwarded_for;

    proxy_read_timeout          600;
    proxy_intercept_errors      on;
    proxy_buffering             off;

    ssl on;
    ssl_prefer_server_ciphers       on;
    ssl_protocols                   TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers                     !aNULL:!eNULL:FIPS@STRENGTH:!3DES;
    ssl_session_cache               shared:SSL:5m;
    ssl_session_timeout             60m;
    ssl_certificate                 /etc/letsencrypt/live/kevintweaks.com/fullchain.pem;
    ssl_certificate_key             /etc/letsencrypt/live/kevintweaks.com/privkey.pem;

    # GZIP

    gzip                on;
    gzip_disable        "msie6";
    gzip_proxied        any;
    gzip_comp_level     6;
    gzip_min_length     256;
    gzip_http_version   1.0;
    gzip_types          text/plain
                        text/css
                        application/x-javascript
                        application/json
                        text/xml
                        application/xml
                        application/xml+rss
                        text/javascript

    include /etc/nginx/sites-enabled/*;

    server {

        listen 443;
        server_name kevintweaks.com;

                location / {
                        proxy_http_version    1.1;
                        root /home/jarmahent/deco3/html_root;
                        location ~* \.(.gif|ico|jpg|css|js)$ {expires @24h;}

                        error_log /home/jarmahent/deco3/deco3-instance-error.log;
                        access_log /home/jarmahent/deco3/deco3-instance-access.log;

                        charset utf-8;
                        error_page 404 502;



                        proxy_pass http://127.0.0.1:9290;
                }
    }
}