user root root;

worker_processes  1;

#worker_cpu_affinity 1;

worker_rlimit_nofile 60000;

#error_log  logs/error.log;

#error_log  logs/error.log  notice;

#error_log  logs/error.log  info;

pid        /var/run/nginx.pid;

events {

    use epoll;

    worker_connections  60000;

}

http {

    include mime.types;

    default_type application/octet-stream;

    server_names_hash_bucket_size 128;

    client_header_buffer_size 32k;

    large_client_header_buffers 4 32k;

    client_max_body_size 50m;

    sendfile on;

    tcp_nopush on;

    keepalive_timeout 120;

    server_tokens off;

    tcp_nodelay on;

    #ws

#        map $http_upgrade $connection_upgrade {

#        default upgrade;

#        ''      close;

#    }

    fastcgi_connect_timeout 300;

    fastcgi_send_timeout 300;

     fastcgi_read_timeout 300;

    fastcgi_buffer_size 64k;

    fastcgi_buffers 4 64k;

    fastcgi_busy_buffers_size 128k;

    fastcgi_temp_file_write_size 128k;

    #Gzip Compression

    gzip on;

    gzip_buffers 16 8k;

    gzip_comp_level 6;

    gzip_http_version 1.1;

    gzip_min_length 256;

    gzip_proxied any;

    gzip_vary on;

    gzip_types

        text/xml application/xml application/atom+xml application/rss+xml application/xhtml+xml image/svg+xml

        text/javascript application/javascript application/x-javascript

        text/x-json application/json application/x-web-app-manifest+json

        text/css text/plain text/x-component

        font/opentype application/x-font-ttf application/vnd.ms-fontobject

        image/x-icon;

    gzip_disable  "msie6";

    #If you have a lot of static files to serve through Nginx then caching of the files' metadata (not the actual files' contents) can save

some latency.

    open_file_cache max=1000 inactive=20s;

    open_file_cache_valid 30s;

    open_file_cache_min_uses 2;

    open_file_cache_errors on;

        access_log off;

        include vhost/*.conf;

}

server {

    listen 80;

    server_name dev.hr.static.baidu.com;

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|ico|js|css|html|woff2|woff)$ {

        root /deploy/www/baidu-www/web-hr;

        add_header Access-Control-Allow-Origin *;

        add_header Access-Control-Allow-Headers X-Requested-With;

        add_header Access-Control-Allow-Methods GET,POST,OPTIONS;

    }

}

server {

    listen 80;

    server_name dev.am.static.baidu.com;

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|ico|js|css|html|woff2|woff)$ {

        root /deploy/www/baidu-www/web-am;

        add_header Access-Control-Allow-Origin *;

        add_header Access-Control-Allow-Headers X-Requested-With;

        add_header Access-Control-Allow-Methods GET,POST,OPTIONS;

    }

}

server {

        listen 80;

        server_name am.dev.baidu.com;

        access_log logs/am.baidu.com_nginx.log combined;

        index index.html index.jsp index.php;

location ^~ /api {

        proxy_pass  http://127.0.0.1:8081/;#需要代理的地址

        include proxy.conf;

        }

location ^~ / {

        root /deploy/www/baidu-www/web-am/;

        }

}

表示使nginx阻止HTTP应答代码为400或者更高的应答

#proxy_intercept_errors  on;

proxy_redirect          off;

#以下三行，目的是将代理服务器收到的用户的信息传到真实服务器上

#后端的Web服务器可以通过X-Forwarded-For获取用户真实IP

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forwarded-Ssl on;

proxy_set_header Accept-Encoding '';

proxy_set_header Referer $http_referer;

proxy_set_header Cookie $http_cookie;

#允许客户端请求的最大单文件字节数

client_max_body_size 10m;

#缓冲区代理缓冲用户端请求的最大字节数

client_body_buffer_size 128k;

#nginx跟后端服务器连接超时时间(代理连接超时)

proxy_connect_timeout 300;

#连接成功后，后端服务器响应时间(代理接收超时)

proxy_read_timeout 900;

#设置代理服务器（nginx）保存用户头信息的缓冲区大小

proxy_buffer_size 32k;

#proxy_buffers缓冲区，网页平均在32k以下的话，这样设置

proxy_buffers 4 64k;

#高负荷下缓冲大小（proxy_buffers*2）

proxy_busy_buffers_size 128k;

#设定缓存文件夹大小，大于这个值，将从upstream服务器传

proxy_temp_file_write_size 64k;

proxy_send_timeout 900;

proxy_hide_header Vary;