server {
listen *:443;
listen *:80;
server_name industrialbank.zp.ua;
client_max_body_size 101M;
access_log /var/log/nginx/oldsites.log main;
error_log /var/log/nginx/oldsites_error.log debug;
ssl on;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_session_timeout 5m;
ssl_prefer_server_ciphers on;
ssl_certificate /usr/local/www/industrial/s1/wildcard.industrialbank.ua.2011.crt;
ssl_certificate_key /usr/local/www/industrial/s1/wildcard.nopass-industrialbank.ua.key;
#Main location
location / {
fastcgi_pass backend;
fastcgi_index index.php;
fastcgi_param QUERY_STRING $query_string;
fastcgi_param REQUEST_METHOD $request_method;
fastcgi_param CONTENT_TYPE $content_type;
fastcgi_param CONTENT_LENGTH $content_length;
fastcgi_param REDIRECT_STATUS 200;
include fastcgi_params;
proxy_pass
http://backend;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 10m;
client_body_buffer_size 128k;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffer_size 4k;
proxy_buffers 4 32k;
proxy_busy_buffers_size 64k;
proxy_temp_file_write_size 64k;
}
location = /stat {
stub_status on;
access_log off;
allow 172.16.8.121;
deny all;
}
#Otdacha statiki
location ~* ^.+\.(jpg|jpeg|gif|png|ico|tif|tiff|css|cms|bmp|js|swf|pdf|doc|docx|xls|xlsx|rar|zip|7zip|mp3|avi|exe|bat|com)$ {
root /usr/local/www/industrial/old-sites/;
limit_rate_after 2k;
limit_rate 1k;
}
}
