user nginx nginx ;
worker_processes 2;
worker_rlimit_nofile 65535;
error_log logs/error.log;
pid logs/nginx.pid;
events {
use epoll;
worker_connections 65535;
}
http {
include mime.types;
default_type application/octet-stream;
log_format main '$remote_addr - $remote_user [$time_local] "$request_time" "$request" '
'$status $body_bytes_sent "$http_referer" '
'"UserAgent:$http_UserAgent" "userToken:$http_userToken" "$time_iso8601"'
'"$http_user_agent" "$http_x_forwarded_for" "$upstream_cache_status" "$host"';
sendfile on;
add_header ServerID "umihz";
server_tokens off;
tcp_nopush on;
keepalive_timeout 240;
########################################################################
proxy_ignore_client_abort on;
server_names_hash_bucket_size 128;
client_header_buffer_size 64k;
large_client_header_buffers 4 64k;
client_max_body_size 20m;
ssi on;
ssi_silent_errors on;
ssi_types text/shtml;
fastcgi_connect_timeout 600;
fastcgi_send_timeout 600;
fastcgi_read_timeout 600;
fastcgi_buffer_size 128k;
fastcgi_buffers 4 128k;
fastcgi_busy_buffers_size 256k;
fastcgi_temp_file_write_size 256k;
gzip on;
gzip_min_length 1k;
gzip_buffers 4 16k;
gzip_disable "MSIE [1-6]\.";
gzip_http_version 1.0;
gzip_comp_level 2;
gzip_types text/plain application/x-javascript text/javascript text/css application/xml image/jpeg image/gif image/png application/json application/javascript;
gzip_vary on;
############################################################
include vhosts/*.conf;
############################################################
}
upstream polarisex {
server 10.9.0.210:28010 max_fails=3 fail_timeout=10s;
server 10.9.0.139:28010 max_fails=3 fail_timeout=10s;
}
upstream mgr {
server 10.9.0.139:28060;
}
upstream img {
server 10.9.0.139:80;
}
upstream nodeserver {
server 10.9.0.210:3000;
}
upstream process{
server 10.9.0.210:39527;
}
upstream trade{
server 10.9.0.139:28110;
}
server {
listen 80;
server_name 54.169.140.238;
#index index.html;
#root /data/dist;
#root /usr/local/webserver/porsche/carrera-fe;
location / {
proxy_pass http://nodeserver;
}
location ^~ /static {
root /data/work/frontend/ex-frontend;
}
location ^~ /img {
proxy_pass http://img;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
}
location /polarisex {
proxy_pass http://polarisex;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
}
location ^~ /trade {
proxy_pass http://trade;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
}
location /backend {
proxy_pass http://mgr;
}
location /app {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location /socket.io {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_pass http://process;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 80;
server_name stage-www.ace.io stage.ace.io www.ace.io ace.io;
access_log /data/logs/nginx/stage.acex.one.log main;
location / {
rewrite ^/(.*)$ https://stage.ace.io/$1 last ;
}
}
server {
listen 443 ssl http2;
server_name stage.ace.io;
ssl on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'AES128+EECDH:AES128+EDH:!aNULL';
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_certificate /etc/nginx/ssl/ace.io.crt;
ssl_certificate_key /etc/nginx/ssl/ace.io.key;
access_log /data/logs/nginx/stage.acex.one.log main;
location / {
proxy_pass http://nodeserver;
}
location ^~ /static {
root /data/work/frontend/ex-frontend;
}
location ^~ /img {
proxy_pass http://img;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
}
location /polarisex {
proxy_pass http://polarisex;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
}
location ^~ /trade {
proxy_pass http://trade;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
}
location /backend {
proxy_pass http://mgr;
}
location /app {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location /socket.io {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_pass http://process;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}