user www-data;
worker_processes 4;
pid /var/run/nginx.pid;
 
events {
    worker_connections 1024;
    }
 
http {
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 3;
    types_hash_max_size 2048;
    include /etc/nginx/mime.types;
    default_type application/octet-stream;
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;
    gzip on;
    gzip_disable msie6;
    gzip_static on;
    gzip_comp_level 4;
    gzip_proxied any;
    gzip_types text/plain
               text/css
               application/x-javascript
               text/xml
               application/xml
               application/xml+rss
               text/javascript;
 
    index index.php index.html index.htm;
 
    # Define PHP FPM backend.
    upstream phpfpmbackend {
        server unix:/tmp/php5-fpm.sock;
        }
 
    # Define FastCGI cache.
    fastcgi_cache_path /var/cache/nginx levels=1:2 keys_zone=wordpresscache:30m inactive=60m;
    fastcgi_temp_path /var/cache/nginx/tmp;
 
    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
    }

# Redirect www.gehrcke.de to gehrcke.de.
server {
    server_name www.gehrcke.de;
    access_log off;
    return 301 $scheme://gehrcke.de$request_uri;
    }
 
# Redirect any other server name to gehrcke.de.
server {
    server_name  _;
    access_log off;
    rewrite ^ $scheme://gehrcke.de$request_uri redirect;
    }
 
server {
    server_name gehrcke.de;
    root /path_to/gehrcke_de_website/;
 
    error_log /path_to/nginx_logs/nginx_error_log.log error;
    access_log /path_to/nginx_logs/nginx_access_log.log;
 
    # Security: deny access to any files with a .php extension in
    # WP upload directory.
    location ~* /(?:uploads|files)/.*\.php$ {
        deny all;
        }
 
    # Try if static file exists. If not, hand over to WordPress index.php.
    location / {
        try_files $uri $uri/ /index.php?$args;   
        }
 
    # Deactivate access_log for WordPress monitoring site. Do not cache.
    location /status {
        access_log off;
        include fastcgi_params;
        fastcgi_pass phpfpmbackend;
        fastcgi_param SCRIPT_FILENAME $document_root/index.php;
        }
 
    # Add trailing slash to */wp-admin requests.
    rewrite /wp-admin$ $scheme://$host$uri/ permanent;
 
    location ~ \.php$ {
        fastcgi_pass phpfpmbackend;
        include fastcgi_params;
 
        set $wordpress_nocache "";
        if ($http_cookie ~ (comment_author_.*|wordpress_logged_in.*|wp-postpass_.*)) {
            set $wordpress_nocache "true";
            }
        if ($request_method ~ ^(HEAD|POST)$) {
            set $wordpress_nocache "true";
            }
 
        fastcgi_cache_use_stale error timeout invalid_header http_500;
        fastcgi_cache_key "$scheme$request_method$host$request_uri";
        fastcgi_cache wordpresscache;
 
        # Logging configuration. Log to two files:
        #   1) caching log, indicating whether a request was answered from
        #      cache or via PHP backend.
        #   2) normal access log for e.g. evaluation via AWStats.
        # The 'cache' logging definition prints warning on nginx restart (saying
        # it should be defined in HTTP block). However, there it does not work
        # properly. Here, it shows all information correctly.
        log_format cache '***[$time_local] '
            'upstream_cache_status: "$upstream_cache_status" '
            'Cache-Control: "$upstream_http_cache_control" '
            'Expires: "$upstream_http_expires" '
            'Request: "$request" Status: "$status" '
            'User agent: "$http_user_agent" ';
        access_log /home/gehrckede/nginx_logs/nginx_cache.log cache;
        access_log /home/gehrckede/nginx_logs/nginx_access_log.log;
 
        # These parameters have to be chosen for each project individually.
        fastcgi_cache_valid  200 302 304 1h;
        fastcgi_cache_valid  301 1h;
        fastcgi_cache_valid  any 5m;
        fastcgi_no_cache $wordpress_nocache;
        fastcgi_cache_bypass $wordpress_nocache;        
        }
 
    # Activate cache purge feature.
    # Request e.g. http://domain.com/purgecache/2013/01/blogpost-title/
    location ~ /purgecache(/.*) {
        fastcgi_cache_purge wordpresscache "$scheme$request_method$host$1";
        }   
 
    # Don't show favicon requests in access log.
    location = /favicon.ico {
        log_not_found off;
        access_log off;
        }
 
    # Deny all attempts to access hidden files such as .htaccess.
    location ~ /\. {
        deny all;
        }
 
    # Hide certain locations.
    location = /privatearea {
        return 404;
        }
 
    # Allow directory listing for certain locations.
    location /files/stud  {
        autoindex on;
        }   
    location /awsac/permstuff {
        autoindex on;
        }
 
    # Explicit redirects.
    location ^~ /gsoc {
        rewrite ^ $scheme://gehrcke.de/projects/google-summer-of-code redirect;
        }
 
    # PHP Monitoring.
    # These monitoring sites are configured in the php-fpm config.
    location ~ ^/(status_php5fpm|ping_php5fpm)$ {
        include fastcgi_params;
        fastcgi_pass phpfpmbackend;
        }
 
    # nginx monitoring.
    location /nginxstatus {
        stub_status on;
        access_log off;
        }
    }