user www-data;
worker_processes 2;
pid /run/nginx.pid;

worker_rlimit_nofile 100000;

events {
#worker_connections 4096;
worker_connections 2048;
# SOLO PARA PRUEBAS
use epoll;
# SOLO PARA PRUEBAS
multi_accept on;
}

http {
##
# Basic Settings
##

# cache informations about FDs, frequently accessed files
# can boost performance, but you need to test those values
open_file_cache max=200000 inactive=20s;
open_file_cache_valid 30s;
open_file_cache_min_uses 2;
open_file_cache_errors on;

sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 10;
keepalive_requests 1000;
types_hash_max_size 2048;
server_tokens off;

# server_names_hash_bucket_size 64;
# server_name_in_redirect off;

include /etc/nginx/mime.types;
default_type application/octet-stream;


##
# Logging Settings
##

access_log off;
#access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log debug;

##
# Gzip Settings
##

#gzip on;
#gzip_disable "msie6";

 #gzip_vary on;
 #gzip_proxied any;
 #gzip_comp_level 6;
 #gzip_min_length  1000;
 #gzip_buffers 16 8k;
 #gzip_http_version 1.1;
 #gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

# allow the server to close connection on non responding client, this will free up memory
reset_timedout_connection on;

##
# Virtual Host Configs
##

include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
}

# Default server configuration
#
server {

# SSL configuration
#
 listen 443 ssl default_server;
 listen [::]:443 ssl default_server;

 #expires $expires;

 ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
 #ssl_ciphers         AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;
 ssl_ciphers ALL:!aNULL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
 ssl_certificate_key /var/www/afct/.lis/pollafutbolera.comfandi.com.co.key;
 ssl_certificate     /var/www/afct/ea21c6af62f3cf3d.crt;
 ssl_session_cache builtin:1000 shared:SSL:10m;
 ssl_session_timeout 10m;
 ssl_buffer_size 4k;
# Note: You should disable gzip for SSL traffic.
# See: https://bugs.debian.org/773332
#
# Read up on ssl_ciphers to ensure a secure configuration.
# See: https://bugs.debian.org/765782
#
# Self signed certs generated by the ssl-cert package
# Don't use them in a production server!
#
# include snippets/snakeoil.conf;

root /var/www/html;

# Add index.php to the list if you are using PHP
index index.html index.php;

server_name www.pollafutbolera.comfandi.com.co;

location / {
    # First attempt to serve request as file, then
    # as directory, then fall back to displaying a 404.
    #try_files $uri $uri/ =404;
    try_files $uri $uri/ /index.php?$query_string;
}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ .php$ {
    include snippets/fastcgi-php.conf;
#
#   # With php7.0-cgi alone:
    fastcgi_pass 127.0.0.1:9000;
#   # With php7.0-fpm:
    #fastcgi_pass unix:/run/php/php7.2-fpm.sock;
    fastcgi_read_timeout 240;
}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
location ~ /.ht {
    deny all;
}

location ~* .(?:ico|css|js|gif|jpe?g|png)$ {
    # Some basic cache-control for static files to be sent to the browser
    expires max;
    add_header Pragma public;
    add_header Cache-Control "public, must-revalidate, proxy-revalidate";
  }
}