upstream php {
#nginx与phpfcgi的通信方式
#用Unix Socket通行方式比TCP通信方式速度快，但是TCP在高并发的时候比Unix Socket稳定
server unix:/tmp/php-cgi.sock;
#server 127.0.0.1:9000;
}
server {
listen 80;
server_name meaninglive.com www.meaninglive.com;
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl;
charset utf-8;
server_name meaninglive.com www.meaninglive.com;
access_log /data/logs/nginx/wordpress_access.log main;
error_log /data/logs/nginx/wordpress_error.log error;
index index.html index.htm index.php default.html default.htm default.php;
root /data/wwwroot/rainingwalk;
ssl_certificate cert/meaninglive.com/full_chain.pem;
ssl_certificate_key cert/meaninglive.com/private.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_prefer_server_ciphers on;
set $skip_cache 0;
#这是对网站的301重定向，当用linuxde.net地址访问，会跳转到www.linuxde.net
#if ($host !~ "^www\.linuxde\.net$") {
# rewrite ^(.*) http://138.128.212.28$1 permanent;
#}
location ~ /xmlrpc {
deny all;
}
location /xmlrpc.php {
deny all;
}
# POST 和带参数的请求(动态查询)不展示缓存
if ($request_method = POST) {
set $skip_cache 1;
}
if ($query_string != "") {
set $skip_cache 1;
}
#后台等特定页面不缓存（其他需求请自行添加即可）
if ($request_uri ~* "/wp-admin/|/xmlrpc.php|wp-.*.php|/feed/|index.php|sitemap(_index)?.xml") {
set $skip_cache 1;
}
#对登录用户、评论过的用户不展示缓存
if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass|wordpress_no_cache|wordpress_logged_in") {
set $skip_cache 1;
}
location / {
proxy_redirect off;
proxy_set_header Host $host;
#这行打开real-ip这个header
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#set_real_ip_from 0.0.0.0/0;
#real_ip_header X-Forwarded-For;
#real_ip_recursive on;
#此处可以添加自定义的伪静态规则（之前你新增的伪静态规则可以添加到这，没有就不用了）
#wordpress的伪静态
if (-f $request_filename/index.html){
rewrite (.*) $1/index.html break;
}
if (-f $request_filename/index.php){
rewrite (.*) $1/index.php;
}
if (!-f $request_filename){
rewrite (.*) /index.php;
}
try_files $uri $uri/ /index.php?$args;
rewrite /wp-admin$ $scheme://$host$uri/ permanent;
}
location ~ .*\.(php|php5)?$ {
#NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
try_files $uri =404;
include fastcgi.conf;
fastcgi_intercept_errors on;
fastcgi_pass php;
fastcgi_cache_bypass $skip_cache;
fastcgi_no_cache $skip_cache;
fastcgi_index index.php;
add_header X-Cache "$upstream_cache_status From $host";
fastcgi_cache WORDPRESS;
fastcgi_cache_valid 200 301 302 1d;
fastcgi_buffers 16 16k;
fastcgi_buffer_size 32k;
}
#缓存清理配置（可选模块，请细看下文说明）
location ~ /purge(/.*) {
allow all;
#allow 127.0.0.1;
#allow "此处填写你服务器的真实外网IP";
#deny all;
fastcgi_cache_purge WORDPRESS "$scheme$request_method$host$1";
}
location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
access_log off;
log_not_found off;
expires max;
}
location = /robots.txt { access_log off; log_not_found off; }
location ~ /\. { deny all; access_log off; log_not_found off; }
}