worker_processes auto; error_log stderr warn; pid /run/nginx.pid; events { use epoll; worker_connections 1024; } http { include mime.types; default_type application/octet-stream; gzip on; gzip_static on; gzip_comp_level 4; gzip_types application/json text/plain text/xml; gzip_vary on; log_format main_timed '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for" ' '$request_time $upstream_response_time $pipe $upstream_cache_status'; access_log /dev/stdout main_timed; error_log /dev/stderr notice; server { listen 0.0.0.0:8085 default_server; server_name icore; charset utf-8; source_charset utf-8; sendfile on; tcp_nopush on; tcp_nodelay on; server_tokens off; send_timeout 10; # keepalive_timeout 15; client_body_timeout 15; client_header_timeout 15; client_max_body_size 20m; client_header_buffer_size 20m; large_client_header_buffers 4 20m; client_body_buffer_size 20m; fastcgi_buffer_size 20m; fastcgi_buffers 4 20m; fastcgi_busy_buffers_size 20m; gzip_buffers 16 20m; proxy_buffer_size 20m; proxy_buffers 4 20m; proxy_busy_buffers_size 20m; keepalive_timeout 240; fastcgi_connect_timeout 600; fastcgi_send_timeout 600; fastcgi_read_timeout 600; proxy_connect_timeout 600s; proxy_send_timeout 1200; proxy_read_timeout 1200; add_header X-Frame-Options SAMEORIGIN; add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection "1; mode=block"; root /var/www/html/public; index index.php; try_files $uri $uri/ @rewrite; location @rewrite { rewrite ^/(.*)$ /index.php?_url=/$1; } error_page 500 502 503 504 /50x.html; location = /50x.html { root /var/lib/nginx/html; } location ~ \.php$ { try_files $uri =404; fastcgi_read_timeout 420; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass 127.0.0.1:9000; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param SCRIPT_NAME $fastcgi_script_name; fastcgi_index index.php; include fastcgi_params; } location ~ /\. { log_not_found off; deny all; } location ~ ^/(fpm-status|fpm-ping)$ { access_log off; allow 127.0.0.1; deny all; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; fastcgi_pass 127.0.0.1:9000; } } }