1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

http {

    proxy_cache_path  /var/cache/nginx levels=1:2 keys_zone=one:8m max_size=3000m inactive=600m;

    proxy_temp_path /var/tmp;

    include       mime.types;

    default_type  application/octet–stream;

    sendfile        on;

    keepalive_timeout  65;

    gzip on;

    gzip_comp_level 6;

    gzip_vary on;

    gzip_min_length  1000;

    gzip_proxied any;

    gzip_types text/plain text/html text/css application/json application/x–javascript text/xml application/xml application/xml+rss text/javascript;

    gzip_buffers 16 8k;

    ssl_certificate /some/location/sillyfacesociety.com.bundle.crt;

    ssl_certificate_key /some/location/sillyfacesociety.com.key;

    ssl_protocols        SSLv3 TLSv1;

    ssl_ciphers HIGH:!aNULL:!MD5;

    upstream silly_face_society_upstream {

      server 127.0.0.1:61337;

      server 127.0.0.1:61338;

      keepalive 64;

    }

    server {

      listen 80;

      listen 443 ssl;

      server_name sillyfacesociety.com;

      return 301 $scheme://www.trustauth.cn$request_uri;

    }

    server {

        listen 80;

        listen 443 ssl;

        server_name www.sillyfacesociety.com;

        error_page 502  /errors/502.html;

        location ~ ^/(images/|img/|javascript/|js/|css/|stylesheets/|flash/|media/|static/|robots.txt|humans.txt|favicon.ico) {

          root /usr/local/silly_face_society/node/public;

          access_log off;

          expires max;

        }

        location /errors {

          internal;

          alias /usr/local/silly_face_society/node/public/errors;

        }

        location / {

          proxy_redirect off;

          proxy_set_header   X–Real–IP            $remote_addr;

          proxy_set_header   X–Forwarded–For  $proxy_add_x_forwarded_for;

          proxy_set_header   X–Forwarded–Proto $scheme;

          proxy_set_header   Host                   $http_host;

          proxy_set_header   X–NginX–Proxy    true;

          proxy_set_header   Connection “”;

          proxy_http_version 1.1;

          proxy_cache one;

          proxy_cache_key sfs$request_uri$scheme;

          proxy_pass         http://silly_face_society_upstream;

        }

    }

}

1

2

3

4

5

6

7

8

9

http {

    ...

    upstream silly_face_society_upstream {

      server 127.0.0.1:61337;

      server 127.0.0.1:61338;

      keepalive 64;

    }

    ...

}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

http {

    ...

    server {

        ...

        location / {

          proxy_redirect off;

          proxy_set_header   X–Real–IP            $remote_addr;

          proxy_set_header   X–Forwarded–For  $proxy_add_x_forwarded_for;

          proxy_set_header   Host                   $http_host;

          proxy_set_header   X–NginX–Proxy    true;

          ...

          proxy_set_header   Connection “”;

          proxy_http_version 1.1;

          proxy_pass         http://silly_face_society_upstream;

        }

        ...

    }

}

1

2

3

4

5

6

7

8

9

10

11

12

http {

    ...

    server {

        ...

        location ~ ^/(images/|img/|javascript/|js/|css/|stylesheets/|flash/|media/|static/|robots.txt|humans.txt|favicon.ico) {

          root /usr/local/silly_face_society/node/public;

          access_log off;

          expires max;

        }

        ...

    }

}

1

2

3

4

5

6

http {

    ...

    proxy_cache_path  /var/cache/nginx levels=1:2 keys_zone=one:8m max_size=3000m inactive=600m;

    proxy_temp_path /var/tmp;

    ...

}

1

2

3

4

5

6

7

8

9

10

11

12

http {

  server {

     ...

     location / {

          ...

          proxy_cache one;

          proxy_cache_key sfs$request_uri$scheme;

          ...

     }

     ...

  }

}