| 
									
										
										
										
											2017-06-17 21:54:51 -06:00
										 |  |  | ## | 
					
						
							|  |  |  | # You should look at the following URL's in order to grasp a solid understanding | 
					
						
							|  |  |  | # of Nginx configuration files in order to fully unleash the power of Nginx. | 
					
						
							|  |  |  | # http://wiki.nginx.org/Pitfalls | 
					
						
							|  |  |  | # http://wiki.nginx.org/QuickStart | 
					
						
							|  |  |  | # http://wiki.nginx.org/Configuration | 
					
						
							|  |  |  | # | 
					
						
							|  |  |  | # Generally, you will want to move this file somewhere, and start with a clean | 
					
						
							|  |  |  | # file but keep this around for reference. Or just disable in sites-enabled. | 
					
						
							|  |  |  | # | 
					
						
							|  |  |  | # Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. | 
					
						
							|  |  |  | ## | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | # Default server configuration | 
					
						
							|  |  |  | # | 
					
						
							| 
									
										
										
										
											2017-07-18 16:40:12 -06:00
										 |  |  | 
 | 
					
						
							|  |  |  | # Expires map | 
					
						
							|  |  |  | map $sent_http_content_type $expires { | 
					
						
							|  |  |  |     default                    off; | 
					
						
							|  |  |  |     text/html                  epoch; | 
					
						
							|  |  |  |     text/css                   max; | 
					
						
							|  |  |  |     application/javascript     max; | 
					
						
							|  |  |  |     ~image/                    max; | 
					
						
							|  |  |  |     application/font-woff      max; | 
					
						
							|  |  |  |     application/font-woff2     max; | 
					
						
							|  |  |  |     application/x-font-truetype max; | 
					
						
							|  |  |  |     application/x-font-opentype max; | 
					
						
							|  |  |  | } | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-06-17 21:54:51 -06:00
										 |  |  | server { | 
					
						
							| 
									
										
										
										
											2017-09-06 15:37:42 -06:00
										 |  |  | #	listen 8080 default_server; | 
					
						
							|  |  |  | #	listen [::]:8080 default_server; | 
					
						
							| 
									
										
										
										
											2017-06-17 21:54:51 -06:00
										 |  |  | #	return 301 https://$host$request_uri; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	# SSL configuration | 
					
						
							|  |  |  | 	# | 
					
						
							|  |  |  |         listen 443 ssl default_server; | 
					
						
							|  |  |  | 	listen [::]:443 ssl default_server; | 
					
						
							|  |  |  | 	ssl_certificate /etc/letsencrypt/live/bereanbibleutah.com/fullchain.pem; | 
					
						
							|  |  |  | 	ssl_certificate_key /etc/letsencrypt/live/bereanbibleutah.com/privkey.pem; | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-07-18 16:40:12 -06:00
										 |  |  | 	expires $expires; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |  # Enable Gzip | 
					
						
							|  |  |  |   gzip  on; | 
					
						
							|  |  |  |   gzip_buffers     4 8k; | 
					
						
							|  |  |  |   gzip_proxied any; | 
					
						
							|  |  |  |   gzip_types | 
					
						
							|  |  |  |     text/css | 
					
						
							|  |  |  |     font/truetype | 
					
						
							|  |  |  |     font/opentype | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |   gzip_static on; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  |   gzip_proxied        expired no-cache no-store private auth; | 
					
						
							|  |  |  |   gzip_disable        "MSIE [1-6]\."; | 
					
						
							|  |  |  |   gzip_vary           on; | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-06-17 21:54:51 -06:00
										 |  |  | 
 | 
					
						
							|  |  |  | 	# | 
					
						
							|  |  |  | 	# Note: You should disable gzip for SSL traffic. | 
					
						
							|  |  |  | 	# See: https://bugs.debian.org/773332 | 
					
						
							|  |  |  | 	# | 
					
						
							|  |  |  | 	# Read up on ssl_ciphers to ensure a secure configuration. | 
					
						
							|  |  |  | 	# See: https://bugs.debian.org/765782 | 
					
						
							|  |  |  | 	# | 
					
						
							|  |  |  | 	# Self signed certs generated by the ssl-cert package | 
					
						
							|  |  |  | 	# Don't use them in a production server! | 
					
						
							|  |  |  | 	# | 
					
						
							|  |  |  | 	# include snippets/snakeoil.conf; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	root /var/www/wordpress; | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	# Add index.php to the list if you are using PHP | 
					
						
							|  |  |  | 	index index.php index.html index.htm; | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-07-18 16:40:12 -06:00
										 |  |  | 	server_name bereanbibleutah.org; | 
					
						
							| 
									
										
										
										
											2017-06-17 21:54:51 -06:00
										 |  |  | 
 | 
					
						
							|  |  |  | 	location / { | 
					
						
							|  |  |  | 		# First attempt to serve request as file, then | 
					
						
							|  |  |  | 		# as directory, then fall back to displaying a 404. | 
					
						
							|  |  |  | 		#try_files $uri $uri/ =404; | 
					
						
							|  |  |  | 		try_files $uri $uri/ /index.php?$args; | 
					
						
							|  |  |  | 	} | 
					
						
							| 
									
										
										
										
											2017-07-18 16:40:12 -06:00
										 |  |  | 
 | 
					
						
							|  |  |  | 	location /sermons/ { | 
					
						
							|  |  |  | 		alias /home/josh/sermons/; | 
					
						
							|  |  |  |                 # First attempt to serve request as file, then | 
					
						
							|  |  |  |                 # as directory, then fall back to displaying a 404. | 
					
						
							|  |  |  |                 try_files $uri $uri/ =404; | 
					
						
							|  |  |  |                 #try_files $uri $uri/ /index.php?$args; | 
					
						
							|  |  |  | 		autoindex on; | 
					
						
							|  |  |  |         } | 
					
						
							| 
									
										
										
										
											2017-06-25 21:51:22 -06:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-06-17 21:54:51 -06:00
										 |  |  | 
 | 
					
						
							|  |  |  | 	# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 | 
					
						
							|  |  |  | 	# | 
					
						
							|  |  |  | 	location ~ \.php$ { | 
					
						
							|  |  |  | 		include snippets/fastcgi-php.conf; | 
					
						
							|  |  |  | 	 | 
					
						
							|  |  |  | 		# With php7.0-cgi alone: | 
					
						
							|  |  |  | 	#	fastcgi_pass 127.0.0.1:9000; | 
					
						
							|  |  |  | 	#	# With php7.0-fpm: | 
					
						
							|  |  |  | 		fastcgi_pass unix:/run/php/php7.0-fpm.sock; | 
					
						
							|  |  |  | 	} | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 	# deny access to .htaccess files, if Apache's document root | 
					
						
							|  |  |  | 	# concurs with nginx's one | 
					
						
							|  |  |  | 	# | 
					
						
							|  |  |  | 	location ~ /\.ht { | 
					
						
							|  |  |  | 		deny all; | 
					
						
							|  |  |  | 	} | 
					
						
							|  |  |  | } | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | # Virtual Host configuration for example.com | 
					
						
							|  |  |  | # | 
					
						
							|  |  |  | # You can move that to a different file under sites-available/ and symlink that | 
					
						
							|  |  |  | # to sites-enabled/ to enable it. | 
					
						
							|  |  |  | # | 
					
						
							|  |  |  | #server { | 
					
						
							|  |  |  | #	listen 80; | 
					
						
							|  |  |  | #	listen [::]:80; | 
					
						
							|  |  |  | # | 
					
						
							|  |  |  | #	server_name example.com; | 
					
						
							|  |  |  | # | 
					
						
							|  |  |  | #	root /var/www/example.com; | 
					
						
							|  |  |  | #	index index.html; | 
					
						
							|  |  |  | # | 
					
						
							|  |  |  | #	location / { | 
					
						
							|  |  |  | #		try_files $uri $uri/ =404; | 
					
						
							|  |  |  | #	} | 
					
						
							| 
									
										
										
										
											2017-07-18 16:40:12 -06:00
										 |  |  | #} |