user nginx; # Set number of worker processes automatically based on number of CPU cores. worker_processes auto; # Enables the use of JIT for regular expressions to speed-up their processing. pcre_jit on; # Configures default error logger. error_log /var/log/nginx/error.log warn; # Includes files with directives to load dynamic modules. include /etc/nginx/modules/*.conf; events { use epoll; worker_connections 102400; } http { # Includes mapping of file name extensions to MIME types of responses # and defines the default type. include /etc/nginx/mime.types; default_type application/octet-stream; # Name servers used to resolve names of upstream servers into addresses. # It's also needed when using tcpsocket and udpsocket in Lua modules. #resolver 208.67.222.222 208.67.220.220; # Don't tell nginx version to clients. server_tokens off; # Specifies the maximum accepted body size of a client request, as # indicated by the request header Content-Length. If the stated content # length is greater than this size, then the client receives the HTTP # error code 413. Set to 0 to disable. client_max_body_size 10m; # Timeout for keep-alive connections. Server will close connections after # this time. keepalive_timeout 120; # Sendfile copies data between one FD and other from within the kernel, # which is more efficient than read() + write(). sendfile on; # Don't buffer data-sends (disable Nagle algorithm). # Good for sending frequent small bursts of data in real time. tcp_nodelay on; # Causes nginx to attempt to send its HTTP response head in one packet, # instead of using partial frames. #tcp_nopush on; fastcgi_cache_path /etc/nginx/fastcgi_cache levels=1:2 keys_zone=TEST:10m inactive=5m; fastcgi_temp_path /etc/nginx/temp; fastcgi_connect_timeout 300; fastcgi_send_timeout 300; fastcgi_read_timeout 300; fastcgi_buffer_size 64k; fastcgi_buffers 4 64k; fastcgi_busy_buffers_size 128k; fastcgi_temp_file_write_size 128k; # Path of the file with Diffie-Hellman parameters for EDH ciphers. #ssl_dhparam /etc/ssl/nginx/dh2048.pem; # Specifies that our cipher suits should be preferred over client ciphers. ssl_prefer_server_ciphers on; # Enables a shared SSL cache with size that can hold around 8000 sessions. ssl_session_cache shared:SSL:2m; server_names_hash_bucket_size 128; client_header_buffer_size 32k; large_client_header_buffers 4 32k; # Enable gzipping of responses. gzip on; gzip_min_length 1k; gzip_buffers 4 16k; gzip_http_version 1.0; gzip_comp_level 2; gzip_types text/plain application/javascript application/x-javascript text/css text/javascript application/x-httpd-php image/jpeg image/gif image/png application/xml; # Set the Vary HTTP header as defined in the RFC 2616. gzip_vary on; # Enable checking the existence of precompressed files. #gzip_static on; log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; # Includes virtual hosts configs. include /etc/nginx/conf.d/*.conf; }