server {
    server_name user.takeda.hbraas.com;
#    access_log /data1/wwwlogs/demo.access.log combined;
#    error_log /data1/wwwlogs/takeda.error.log;


## --- logs section begin ----
# 目录名：需要先创建日志目录，然后chown -R www $proj 修改所有者
    access_log /www/log/nginx/takeda/user.nginx.access.log main;
    error_log  /www/log/nginx/takeda/user.nginx.error.log;

#set $proj 'takeda';
#set $subsys 'user';

#access_log /data/wwwlogs/${proj}/${subsys}_${year}${month}${day}_nginx_access.log main;
#error_log  /data/wwwlogs/${proj}/${subsys}_${year}${month}${day}_nginx_error.log;
## --- logs section end ----


    listen 443 ssl;
    # ssl on;
    ssl_certificate /www/cert/takeda/fullchain.pem;
    ssl_certificate_key /www/cert/takeda/privkey.pem;
    ssl_session_timeout 10m;
    ssl_protocols TLSv1.2;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:HIGH:!aNULL:!MD5:!RC4:!DHE:!RSA;
    ssl_prefer_server_ciphers on;
#listen 80;
    root /www/takeda_main/proj_src/huiyuan/services/web;
    index index.html index.htm index.php;

    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
#gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types text/plain application/x-javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
    gzip_vary on;
    gzip_disable "MSIE [1-6]\.";

    location /nginx_status {
        stub_status on;
        access_log off;
        allow 127.0.0.1;
        deny all;
    }


    location ~ ^/apis/[0-9\-a-z]+$ {
        #fastcgi_pass remote_php_ip:9000;
##        fastcgi_pass unix:/dev/shm/php-cgi.sock;
        fastcgi_pass php72:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
        fastcgi_param  SCRIPT_FILENAME    $document_root/index.php;
        if (!-e $request_filename){
            rewrite ^/(.*)/index.php last;
        }
    }

    location ~ ^/pages/[0-9\-a-z]+$ {
        #fastcgi_pass remote_php_ip:9000;
#        fastcgi_pass unix:/dev/shm/php-cgi.sock;
        fastcgi_pass php72:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
        fastcgi_param  SCRIPT_FILENAME    $document_root/index.php;
        if (!-e $request_filename){
            rewrite ^/(.*)/index.php last;
        }
    }

    location ~ ^/wxapi/pushcallback[0-9\-a-z]*$ {
        #fastcgi_pass remote_php_ip:9000;
#        fastcgi_pass unix:/dev/shm/php-cgi.sock;
fastcgi_pass php72:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
        fastcgi_param  SCRIPT_FILENAME    $document_root/index.php;
        if (!-e $request_filename){
            rewrite ^/(.*)/index.php last;
        }
    }
     location ~ ^/meetingapi/pushcallback[0-9\-a-z]*$ {
        #fastcgi_pass remote_php_ip:9000;
#        fastcgi_pass unix:/dev/shm/php-cgi.sock;
fastcgi_pass php72:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
        fastcgi_param  SCRIPT_FILENAME    $document_root/index.php;
        if (!-e $request_filename){
            rewrite ^/(.*)/index.php last;
        }
    }

    location ~ .*\.(php|php5)?$ {
        #fastcgi_pass remote_php_ip:9000;
#        fastcgi_pass unix:/dev/shm/php-cgi.sock;
fastcgi_pass php72:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
        fastcgi_param  SCRIPT_FILENAME    $document_root/index.php;
        if (!-e $request_filename){
            rewrite ^/(.*)/index.php last;
        }
    }

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|ico)$ {
        root /www/takeda_main/proj_src/huiyuan/services/web;
        expires 30d;
        access_log off;
    }
    location ~ .*\.(js|css|html|ttf|woff|woff2)$ {
        root /www/takeda_main/proj_src/huiyuan/services/web;
        expires 7d;
        access_log off;
    }
}
server {
 listen 80;
 server_name user.takeda.hbraas.com;
 rewrite ^/(.*) https://$server_name$request_uri? permanent;
}