include server.inc.conf;

http {
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    include mime.types;
    default_type application/octet-stream;

    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent"';

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    server_tokens off;
    reset_timedout_connection on;
    keepalive_timeout 120;
    ssl_session_cache shared:SSL:20m;
    large_client_header_buffers 8 8k;
    server_names_hash_bucket_size 128;

    gzip on;
    gzip_vary on;
    gzip_proxied                    any;
    gzip_static                     off;
    gzip_http_version 1.1;
    gzip_min_length  1100;
    gzip_comp_level  3;
    gzip_buffers  4 32k;
    gzip_types    text/plain text/xml text/css text/x-component application/x-javascript application/xml application/xml+rss text/javascript application/javascript application/json application/xhtml+xml application/rss+xml application/atom+xml application/vnd.ms-fontobject image/svg+xml image/x-icon application/x-font-ttf font/opentype;

    ignore_invalid_headers on;

    client_header_timeout  30;
    client_body_timeout 30;
    client_body_in_file_only off;
    client_max_body_size 1024M;
    client_body_buffer_size 4m;

    send_timeout     30;
    connection_pool_size  512;
    client_header_buffer_size 256k;
    request_pool_size  32k;
    output_buffers   4 32k;
    postpone_output  1460;

    log_format bytes_log "$msec $bytes_sent .";

    limit_conn_zone   $binary_remote_addr zone=l_conn:10m;
    limit_req_zone $host zone=l_req:10m rate=5r/s;

    # Parameters for back-end request proxy
    proxy_cache_path /var/cache/nginx/cache levels=1:2 keys_zone=static_cache:100m inactive=60m max_size=4G;
    proxy_cache_min_uses            1;
    #proxy_buffers                   8 2m;
    #proxy_buffer_size               10m;
    #proxy_busy_buffers_size         10m;
    proxy_connect_timeout           300;
    proxy_send_timeout              300;
    proxy_read_timeout              300;
    proxy_temp_file_write_size      10m;

    geoip_country /usr/share/GeoIP/GeoIP.dat;
    
    include vhost-default.inc.conf;
    include vhosts.d/*.conf;
}