#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$host $remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" "$upstream_response_time"';

    access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    gzip  on;
     client_max_body_size 100M;


               server {
                        listen    80;
                        server_name   jiankong2.com;
                        access_log  logs/jiankong2.log  main;

                        location / {
                                proxy_pass   http://127.0.0.1:3030;
                                proxy_set_header   Host             $host;
                                proxy_set_header   X-Real-IP        $remote_addr;
                                proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
                                proxy_http_version 1.1;
                                proxy_set_header Upgrade $http_upgrade;
                                proxy_set_header Connection "upgrade";
                         }
                }

               server {
                        listen 443 ssl;
                        server_name   www.jiankong2.com;
                        access_log  logs/www-jiankong2.log  main;
                        ######如果不需要加证书访问下面这些可以注销######
                        ssl on;
                        ssl_certificate       /opt/nginx/conf/cert/ssl/jiankong2.pem;
                        ssl_certificate_key   /opt/nginx/conf/cert/ssl/jiankong2.key;
                        ssl_session_cache shared:SSL:1m;
                        ssl_session_timeout  10m;
                        ssl_prefer_server_ciphers on;
                        ssl_protocols SSLv3 SSLv2 TLSv1 TLSv1.1 TLSv1.2;
                        ######如果不需要加证书访问上面这些可以注销######

                        location / {
                                proxy_pass   http://127.0.0.1:3030;
                                proxy_set_header   Host             $host;
                                proxy_set_header   X-Real-IP        $remote_addr;
                                proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
                                proxy_http_version 1.1;
                                proxy_set_header Upgrade $http_upgrade;
                                proxy_set_header Connection "upgrade";
                         }
                }


}