user  www-data;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr($http_x_real_ip) - $remote_user [$time_local] '
                      '$ssl_protocol/$ssl_cipher '
                      '"$http_host($http_true_client_ip:$upstream_addr) $request" $status $body_bytes_sent '
                      '"$http_referer" "$http_user_agent" "$http_x_forwarded_for"'
                      '\n';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    keepalive_timeout   65;

    gzip                on;
    gzip_static         on;
    gzip_vary           on;
    gzip_disable        "MSIE [1-6]\.";
    gzip_proxied        expired no-cache no-store private auth;
    gzip_comp_level     1;
    gzip_min_length     10k;
    gzip_types
        text/plain
        text/css
        text/js
        text/javascript
        text/html
        text/xml
        text/x-component
        application/javascript
        application/x-javascript
        application/json
        application/xhtml+xml
        application/xml
        application/rss+xml
        application/x-font-ttf
        application/vnd.ms-fontobject
        font/truetype
        font/opentype
        image/svg+xml svg svgz;

    map $http_accept $webp_suffix {
        default "";
        "~*webp" ".webp";
    }
    map $msie $cache_control {
        "1"     "private";
    }
    map $msie $vary_header {
        default "Accept";
        "1"     "";
    }

    server {
        listen                      8888 ssl http2;
        listen                      [::]:8888 ssl http2;
        server_name                 test.cloudminds.com;

        ssl_certificate             /etc/nginx/cert/214971167760195.pem;
        ssl_certificate_key         /etc/nginx/cert/214971167760195.key;
        ssl_session_cache           shared:SSL:10m;
        ssl_session_timeout         10m;
        ssl_protocols               TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers                 HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers   on;

        location / {
            root      /srv/www/cloudia-fe-mall;
            index     index.html;
            try_files $uri $uri/ /index.html;
        }

        location ~* .(jpe?g|png|gif|svg)$ {
            root       /srv/www/cloudia-fe-mall;
            add_header Vary $vary_header;
            add_header Cache-Control $cache_control;
            try_files  $uri$webp_suffix $uri =404;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   /usr/share/nginx/html;
        }
    }
}