user webuzo webuzo;
worker_processes  1;

pid		/usr/local/emps/var/log/nginx/nginx.pid;

events {
	worker_connections  1024;
}


http {
	server_names_hash_bucket_size  128;
	include			mime.types;
	default_type	application/octet-stream;

	log_format main	'$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for"';

	access_log		/usr/local/emps/var/log/web.access.log  main;
	error_log		/usr/local/emps/var/log/error_log;
	
	sendfile		on;
	#tcp_nopush		on;
	
	keepalive_timeout	65;
	
	map $http_upgrade $connection_upgrade {
		default upgrade;
		'' close;
	}
	
	server_tokens off;
	client_max_body_size 128M;

	#gzip  on;
	
	############################
	# ADMIN PANEL
	############################
	server {
	
		listen	   2005 ssl;
		listen	   2004;
		include /usr/local/webuzo/conf/webuzo/emps/admin_port*;
		server_name  localhost;
		
		ssl_certificate			/var/webuzo/certs/webuzo-combined.pem;
		ssl_certificate_key		/var/webuzo/certs/webuzo.key;
		ssl_session_timeout  5m;
		ssl_protocols  	TLSv1 TLSv1.1 TLSv1.2;
		ssl_ciphers  	HIGH:!aNULL:!MD5;
		ssl_prefer_server_ciphers   on;
		
		# The Document Root
		root	/usr/local/webuzo/web/admin;
		
		rewrite "/sess([0-9a-zA-Z]{16})/(.*)" /$2;
		
		# Redirect server error pages to the static pages
		error_page  404					/nginx/404.html;
		error_page  497					/nginx/497.html;
		error_page  500 502 503 504		/nginx/50x.html;
		
		# For proxy from user domains
		set $webuzo_https '';
		set $webuzo_port '';
		set $webuzo_real_ip '';
		include /usr/local/webuzo/conf/webuzo/emps/admin_proxy_security*;
		
		# Any other locations
		include /usr/local/webuzo/conf/webuzo/emps/admin_locations*;

		# Pass the INDEX.PHP OR PHP script OR "/" to FastCGI
		location ~ ^(/index.php|install.php|/filemanager/elfinder.php|/)$ {
			fastcgi_pass	unix:/usr/local/emps/var/fpm-root.sock;			
			fastcgi_read_timeout 3600;
			fastcgi_index	index.php;
			fastcgi_param	SCRIPT_FILENAME  $document_root$fastcgi_script_name;
			fastcgi_param	SCRIPT_NAME	  $fastcgi_script_name;
			include			fastcgi_params;
		}
		
		# Pass the regular PHP scripts to EMPS FastCGI
		location ~ \.php$ {
			fastcgi_pass	unix:/usr/local/emps/var/fpm-webuzo.sock;			
			fastcgi_read_timeout 3600;
			fastcgi_index	index.php;
			fastcgi_param	SCRIPT_FILENAME	$document_root$fastcgi_script_name;
			fastcgi_param	SCRIPT_NAME		$fastcgi_script_name;
			include			fastcgi_params;
		}
		
		# TTY / User Shell
		include /usr/local/webuzo/conf/webuzo/emps/ttyd.conf;
		
		# Custom conf if any !
		include /usr/local/emps/etc/nginx/conf.d/*;
	}
	
	############################
	# ENDUSER PANEL
	############################
	server {
	
		listen	   2003 ssl;
		listen	   2002;
		include /usr/local/webuzo/conf/webuzo/emps/enduser_port*;
		server_name  localhost;
		
		ssl_certificate			/var/webuzo/certs/webuzo-combined.pem;
		ssl_certificate_key		/var/webuzo/certs/webuzo.key;		
		ssl_session_timeout  5m;
		ssl_protocols  	TLSv1 TLSv1.1 TLSv1.2;
		ssl_ciphers  	HIGH:!aNULL:!MD5;
		ssl_prefer_server_ciphers   on;
		
		# The Document Root
		root	/usr/local/webuzo/web/enduser;
		
		rewrite "/sess([0-9a-zA-Z]{16})/(.*)" /$2;
		
		# Redirect server error pages to the static pages
		error_page  404					/nginx/404.html;
		error_page  497					/nginx/497.html;
		error_page  500 502 503 504		/nginx/50x.html;
		
		index index.php index.html index.htm;
		
		# For proxy from user domains
		set $webuzo_https '';
		set $webuzo_port '';
		set $webuzo_real_ip '';
		include /usr/local/webuzo/conf/webuzo/emps/proxy_security*;
		
		# Any other locations
		include /usr/local/webuzo/conf/webuzo/emps/enduser_locations*;

		# Pass the INDEX.PHP OR PHP script OR "/" to FastCGI
		location ~ ^(/index.php|(.+)\.php|/)$ {
			
			# Default is EMPS
			fastcgi_pass	unix:/usr/local/emps/var/fpm-webuzo.sock;

			# Main system
			if ($uri ~ "^(/index.php|/)$") {
				fastcgi_pass	unix:/usr/local/emps/var/fpm-root.sock;
			}

			# Enduser File Manager
			if ($uri ~ "^(/filemanager/elfinder.php)$") {
				fastcgi_pass	unix:/usr/local/emps/var/fpm-root.sock;
			}
			
			fastcgi_read_timeout 3600;
			fastcgi_index	index.php;
			fastcgi_param	SCRIPT_FILENAME  $document_root$fastcgi_script_name;
			fastcgi_param	SCRIPT_NAME	  $fastcgi_script_name;
			include			fastcgi_params;
		}
		
		# TTY / User Shell
		include /usr/local/webuzo/conf/webuzo/emps/ttyd.conf;
		
		# For billing modules this is required
		location ~* \.(eot|otf|svg|ttf|woff|woff2)$ {
			add_header Access-Control-Allow-Origin *;
			expires max;
		}
			
		# Custom conf if any !
		include /usr/local/emps/etc/nginx/conf.d/*;
	}
	
	include /usr/local/webuzo/conf/webuzo/emps/user_domains*.conf;
	
}