1. server {
  2. listen 443 ssl;
  3. server_name www.lamvideo.net;
  5. # SSL
  6. ssl_certificate /etc/letsencrypt/live/lamvideo.net/fullchain.pem;
  7. ssl_certificate_key /etc/letsencrypt/live/lamvideo.net/privkey.pem;
  8. ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  9. ssl_prefer_server_ciphers on;
  10. ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  12. rewrite ^(.*) https://lamvideo.net$1 permanent;
  13. }
  15. server {
  16. listen 80;
  18. server_name lamvideo.net www.lamvideo.net;
  19. rewrite ^(.*) https://lamvideo.net$1 permanent;
  20. }
  22. server {
  23. listen 443 ssl default_server;
  25. # access_log off;
  26. access_log /home/lamvideo.net/logs/access.log;
  27. # error_log off;
  28. error_log /home/lamvideo.net/logs/error.log;
  30. root /home/lamvideo.net/public_html;
  31. index index.php index.html index.htm;
  32. server_name lamvideo.net;
  34. # SSL
  35. ssl_certificate /etc/letsencrypt/live/lamvideo.net/fullchain.pem;
  36. ssl_certificate_key /etc/letsencrypt/live/lamvideo.net/privkey.pem;
  37. ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  38. ssl_prefer_server_ciphers on;
  39. ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
  41. # Improve HTTPS performance with session resumption
  42. ssl_session_cache shared:SSL:50m;
  43. ssl_session_timeout 1d;
  45. # DH parameters
  46. ssl_dhparam /etc/nginx/ssl/dhparam.pem;
  47. # Enable HSTS
  48. add_header Strict-Transport-Security "max-age=31536000" always;
  50. location / {
  51. try_files $uri $uri/ /index.php?$args;
  52. }
  54. # Custom configuration
  55. include /home/lamvideo.net/public_html/*.conf;
  57. # enable ngx_pagespeed
  58. pagespeed on;
  60. pagespeed FileCachePath /var/ngx_pagespeed_cache;
  62. # let's speed up PageSpeed by storing it in the super duper fast memcached
  63. # pagespeed MemcachedThreads 1;
  64. # pagespeed MemcachedServers "localhost:11211";
  66. # disable CoreFilters
  67. pagespeed RewriteLevel PassThrough;
  69. # enable collapse whitespace filter
  70. pagespeed EnableFilters collapse_whitespace;
  72. # enable JavaScript library offload
  73. pagespeed EnableFilters canonicalize_javascript_libraries;
  75. # combine multiple CSS files into one
  76. pagespeed EnableFilters combine_css;
  78. # combine multiple JavaScript files into one
  79. pagespeed EnableFilters combine_javascript;
  81. # remove tags with default attributes
  82. pagespeed EnableFilters elide_attributes;
  84. # improve resource cacheability
  85. pagespeed EnableFilters extend_cache;
  87. # flatten CSS files by replacing @import with the imported file
  88. pagespeed EnableFilters flatten_css_imports;
  89. pagespeed CssFlattenMaxBytes 5120;
  91. # defer the loading of images which are not visible to the client
  92. pagespeed EnableFilters lazyload_images;
  94. # enable JavaScript minification
  95. pagespeed EnableFilters rewrite_javascript;
  97. # enable image optimization
  98. pagespeed EnableFilters rewrite_images;
  100. # pre-solve DNS lookup
  101. pagespeed EnableFilters insert_dns_prefetch;
  103. # rewrite CSS to load page-rendering CSS rules first.
  104. pagespeed EnableFilters prioritize_critical_css;
  106. pagespeed Statistics on;
  107. pagespeed StatisticsLogging on;
  108. pagespeed LogDir /var/log/pagespeed;
  109. pagespeed AdminPath /pagespeed_admin;
  110. pagespeed AdminDomains Allow *.lamvideo.net;
  112. location ~ \.php$ {
  113. fastcgi_split_path_info ^(.+\.php)(/.+)$;
  114. include /etc/nginx/fastcgi_params;
  115. fastcgi_pass 127.0.0.1:9000;
  116. fastcgi_index index.php;
  117. fastcgi_connect_timeout 1000;
  118. fastcgi_send_timeout 1000;
  119. fastcgi_read_timeout 1000;
  120. fastcgi_buffer_size 256k;
  121. fastcgi_buffers 4 256k;
  122. fastcgi_busy_buffers_size 256k;
  123. fastcgi_temp_file_write_size 256k;
  124. fastcgi_intercept_errors on;
  125. fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  126. }
  128. location /nginx_status {
  129. stub_status on;
  130. access_log off;
  131. allow 127.0.0.1;
  132. allow 139.99.45.222;
  133. deny all;
  134. }
  136. location /php_status {
  137. fastcgi_pass 127.0.0.1:9000;
  138. fastcgi_index index.php;
  139. fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  140. include /etc/nginx/fastcgi_params;
  141. allow 127.0.0.1;
  142. allow 139.99.45.222;
  143. deny all;
  144. }
  146. # Disable .htaccess and other hidden files
  147. location ~ /\.(?!well-known).* {
  148. deny all;
  149. access_log off;
  150. log_not_found off;
  151. }
  153. location = /favicon.ico {
  154. log_not_found off;
  155. access_log off;
  156. }
  158. location = /robots.txt {
  159. allow all;
  160. log_not_found off;
  161. access_log off;
  162. }
  164. location ~* \.(3gp|gif|jpg|jpeg|png|ico|wmv|avi|asf|asx|mpg|mpeg|mp4|pls|mp3|mid|wav|swf|flv|exe|zip|tar|rar|gz|tgz|bz2|uha|7z|doc|docx|xls|xlsx|pdf|iso|eot|svg|ttf|woff)$ {
  165. gzip_static off;
  166. add_header Pragma public;
  167. add_header Cache-Control "public, must-revalidate, proxy-revalidate";
  168. access_log off;
  169. expires 30d;
  170. break;
  171. }
  173. location ~* \.(txt|js|css)$ {
  174. add_header Pragma public;
  175. add_header Cache-Control "public, must-revalidate, proxy-revalidate";
  176. access_log off;
  177. expires 30d;
  178. break;
  179. }
  181. location /phpredmin/public/ {
  182. try_files $uri $uri/ /phpredmin/public/index.php;
  183. }
  184. }
  186. server {
  187. listen 2018;
  189. access_log off;
  190. log_not_found off;
  191. error_log /home/lamvideo.net/logs/nginx_error.log;
  193. root /home/lamvideo.net/private_html;
  194. index index.php index.html index.htm;
  195. server_name lamvideo.net;
  197. auth_basic "Restricted";
  198. auth_basic_user_file /home/lamvideo.net/private_html/hocvps/.htpasswd;
  200. location / {
  201. autoindex on;
  202. try_files $uri $uri/ /index.php;
  203. }
  205. location ~ \.php$ {
  206. fastcgi_split_path_info ^(.+\.php)(/.+)$;
  207. include /etc/nginx/fastcgi_params;
  208. fastcgi_pass 127.0.0.1:9000;
  209. fastcgi_index index.php;
  210. fastcgi_connect_timeout 1000;
  211. fastcgi_send_timeout 1000;
  212. fastcgi_read_timeout 1000;
  213. fastcgi_buffer_size 256k;
  214. fastcgi_buffers 4 256k;
  215. fastcgi_busy_buffers_size 256k;
  216. fastcgi_temp_file_write_size 256k;
  217. fastcgi_intercept_errors on;
  218. fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  219. }
  221. location ~ /\. {
  222. deny all;
  223. }
  224. }