user  www www;

worker_processes auto;

error_log  /www/wwwlogs/nginx_error.log  crit;

pid        /www/server/nginx/logs/nginx.pid;

worker_rlimit_nofile ;

events

    {

        use epoll;

        worker_connections ;

        multi_accept on;

    }

http

    {

        include       mime.types;

        #include luawaf.conf;

        include proxy.conf;

        default_type  application/octet-stream;

map $http_upgrade $connection_upgrade {

    default upgrade;

    ''      close;

   }

        server_names_hash_bucket_size ;

        client_header_buffer_size 32k;

        large_client_header_buffers  32k;

        client_max_body_size 50m;

        sendfile   on;

        tcp_nopush on;

        keepalive_timeout ;

        tcp_nodelay on;

        fastcgi_connect_timeout ;

        fastcgi_send_timeout ;

        fastcgi_read_timeout ;

        fastcgi_buffer_size 64k;

        fastcgi_buffers  64k;

        fastcgi_busy_buffers_size 128k;

        fastcgi_temp_file_write_size 256k;

        fastcgi_intercept_errors on;

        gzip on;

        gzip_min_length  1k;

        gzip_buffers      16k;

        gzip_http_version 1.1;

        gzip_comp_level ;

        gzip_types     text/plain application/javascript application/x-javascript text/javascript text/css application/xml;

        gzip_vary on;

        gzip_proxied   expired no-cache no-store private auth;

        gzip_disable   "MSIE [1-6]\.";

        limit_conn_zone $binary_remote_addr zone=perip:10m;

        limit_conn_zone $server_name zone=perserver:10m;

        server_tokens off;

        access_log off;

server

    {

        listen ;

        server_name www.bt.cn;

        index index.html index.htm index.php;

        root  /www/server/phpmyadmin;

        #error_page      /.html;

        include enable-php.conf;

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

        {

            expires      30d;

        }

        location ~ .*\.(js|css)?$

        {

            expires      12h;

        }

        location ~ /\.

        {

            deny all;

        }

        access_log  /www/wwwlogs/access.log;

    }

 server {

         listen  http2;

         server_name www.kangyuzhe.com;

         ssl on;

         ssl_certificate   /www/server/nginx/1_www.kangyuzhe.com_bundle.crt;

         ssl_certificate_key /www/server/nginx/2_www.kangyuzhe.com.key ;

         ssl_session_timeout 5m;

         ssl_protocols TLSv1 TLSv1. TLSv1.;

         ssl_ciphers  HIGH:!aNULL:!MD5;

         ssl_prefer_server_ciphers on;

                    location ^~/ {

                        proxy_pass http://106.13.37.131:80;

                        proxy_set_header Accept-Encoding "";

                        proxy_set_header Referer "http://106.13.37.131/";

                        add_header Access-Control-Allow-Origin *;

                        sub_filter 'http://106.13.37.131' 'https://www.kangyuzhe.com';

                        sub_filter_types text/css text/xml text/html text/javascript application/json application/javascript;

                        sub_filter_once off;

                    }

                    location ~* \.(?:css|js|ttf|woff|svg|ico|png|jpg)$ {

                        proxy_set_header Accept-Encoding "";

                        proxy_set_header Referer "http://106.13.37.131/";

                        proxy_pass http://106.13.37.131/$request_uri;

                        add_header Access-Control-Allow-Origin *;

                        sub_filter 'http://106.13.37.131' 'https://www.kangyuzhe.com';

                        sub_filter_types text/css text/xml text/html text/javascript application/javascript application/json;

                        sub_filter_once off;

                    }

location /ws/chat{

        proxy_pass http://106.13.37.131:80;

        proxy_http_version 1.1;

        proxy_set_header Upgrade $http_upgrade;

        proxy_set_header Connection $connection_upgrade;

        proxy_set_header Origin "";

}

}

include /www/server/panel/vhost/nginx/*.conf;

}