## GENERAL
pid                                             /var/run/nginx.pid;
user                                            www-data www-data;
worker_processes                                2;

events {
    worker_connections  1024;
}


http {
    include                                     mime.types;
    default_type                                 application/octet-stream;

## LOG FORMAT
    log_format  gzip  '$remote_addr - $remote_user [$time_local] $request '
                      '"$status" $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

## SIZE LiMiTS
#    client_body_buffer_size                    8k;
#    client_header_buffer_size                  1k;
    client_max_body_size                        5M;
#    large_client_header_buffers                        1 1k;

## TiMEOUTS
#    client_body_timeout                                5;
#    client_header_timeout                      5;
    keepalive_timeout                           5 5;
#    send_timeout                               5;

## GENERAL OPTiONS
    ignore_invalid_headers                      on;
    limit_zone gulag $binary_remote_addr        10m;
    #limit_req_zone $binary_remote_addr         zone=gulag:10m rate=1r/s;
    recursive_error_pages                       on;
    sendfile                                    on;
    server_name_in_redirect                     off;
    server_tokens                               off;

## TCP OPTiONS
    tcp_nodelay                                 on;
    tcp_nopush                                  on;

## COMPRESSiON
    gzip                                        on;
    gzip_buffers                                16 8k;
    gzip_comp_level                             9;
   # gzip_http_version                          1.0;
    gzip_min_length                             0;
    gzip_types                                  text/plain text/html text/css image/x-icon image/png;
    gzip_vary                                   on;

## COMPRESSION STATIC
   #gzip_static on;
   gzip_http_version 1.1;
   gzip_proxied expired no-cache no-store private auth;
   gzip_disable "MSIE [1-6] \.";

server {
    listen                      80;
    server_name                 localhost;

    access_log                  /var/log/nginx/access.log;
    error_log                   /var/log/nginx/error.log        info;
    expires                     31d;
    limit_conn                  gulag 5;
    root                        /var/www;
    index                       index.html index.htm index.php;

    location /phpmyadmin {
        deny all;
    }

    location ^~ /CONFIG/ {
        deny all;
    }

    # Pass PHP scripts to FastCGI server listening on 127.0.0.1:9000
    location ~ \.php$ {
         root           /var/www;
         fastcgi_pass   127.0.0.1:9000;#default: 127.0.0.1:9000
         fastcgi_index  index.php;
         fastcgi_param  SCRIPT_FILENAME  /var/www$fastcgi_script_name;
         fastcgi_send_timeout 60;
         include        fastcgi_params;
    }

    # Deny access to .htaccess files.
    location ~ /\.ht {
          deny all;
      }
    }
}