Since we're moving between directories, let's get an absolute path to openssl.exe.

$!
$! A few very basic tests for the 'ts' time stamping authority command.
$!
$
$	__arch := VAX
$	if f$getsyi("cpu") .ge. 128 then __arch := AXP
$	exe_dir := sys$disk:[-.'__arch'.exe.apps]
$
$	openssl := mcr 'f$parse(exe_dir+"openssl.exe")'
$	OPENSSL_CONF := [-]CAtsa.cnf
$
$ error:
$	subroutine
$		write sys$error "TSA test failed!"
$		exit 3
$	endsubroutine
$
$ setup_dir:
$	subroutine
$
$		if f$search("tsa.dir") .nes ""
$		then
$			@[-.util]deltree [.tsa]*.*
$ 			set file/prot=(S:RWED,O:RWED,G:RWED,W:RWED) tsa.dir;*
$ 			delete tsa.dir;*
$		endif
$
$		create/dir [.tsa]
$		set default [.tsa]
$	endsubroutine
$
$ clean_up_dir:
$	subroutine
$
$		set default [-]
$		@[-.util]deltree [.tsa]*.*
$ 		set file/prot=(S:RWED,O:RWED,G:RWED,W:RWED) tsa.dir;*
$ 		delete tsa.dir;*
$	endsubroutine
$
$ create_ca:
$	subroutine
$
$		write sys$output "Creating a new CA for the TSA tests..."
$		@[--.util]deltree [.demoCA]*.*
$
$		open/write file VMStsa-response.create_ca
$		write file ""
$		write file "HU"
$		write file "Budapest"
$		write file "Budapest"
$		write file "Gov-CA Ltd."
$		write file "ca1"
$		close file
$		open/read sys$ca_input VMStsa-response.create_ca
$		@[--.apps]CA.com -input sys$ca_input -newca
$		save_severity = $severity
$		close sys$ca_input
$		if save_severity .ne. 1 then call error
$	endsubroutine
$
$ create_tsa_cert:
$	subroutine
$
$		INDEX=p1
$		EXT=p2
$		open/write file VMStsa-response1.create_tsa_cert
$		write file "HU"
$		write file "Budapest"
$		write file "Buda"
$		write file "Hun-TSA Ltd."
$		write file "tsa",INDEX
$		close file
$		define/user sys$input VMStsa-response.create_tsa_cert
$		openssl req -new -
			-out tsa_req'INDEX'.pem -keyout tsa_key'INDEX'.pem
$		if $severity .ne. 1 then call error
$
$		open/write file VMStsa-response2.create_tsa_cert
$		write file "y"
$		write file "y"
$		close file
$		define/user sys$input VMStsa-response.create_tsa_cert
$		openssl ca -in tsa_req'INDEX'.pem -out tsa_cert'INDEX'.pem -
			-extensions "''EXT'"
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ print_request:
$	subroutine
$
$		openssl ts -query -in 'p1' -text
$	endsubroutine
$
$ create_time_stamp_request1: subroutine
$
$		openssl ts -query -data [-]testtsa.com -policy tsa_policy1 -
			-cert -out req1.tsq
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ create_time_stamp_request2: subroutine
$
$		openssl ts -query -data [-]testtsa.com -policy tsa_policy2 -
			-no_nonce -out req2.tsq
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ create_time_stamp_request3: subroutine
$
$		openssl ts -query -data [-]CAtsa.cnf -no_nonce -out req3.tsq
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ print_response:
$	subroutine
$
$		openssl ts -reply -in 'p1' -text
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ create_time_stamp_response:
$	subroutine
$
$		openssl ts -reply -section 'p3' -queryfile 'p1' -out 'p2'
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ time_stamp_response_token_test:
$	subroutine
$
$		RESPONSE2:='p2'.copy_tsr
$		TOKEN_DER:='p2'.token_der
$		openssl ts -reply -in 'p2' -out 'TOKEN_DER' -token_out
$		if $severity .ne. 1 then call error
$		openssl ts -reply -in 'TOKEN_DER' -token_in -out 'RESPONSE2'
$		if $severity .ne. 1 then call error
$		backup/compare 'RESPONSE2' 'p2'
$		if $severity .ne. 1 then call error
$		openssl ts -reply -in 'p2' -text -token_out
$		if $severity .ne. 1 then call error
$		openssl ts -reply -in 'TOKEN_DER' -token_in -text -token_out
$		if $severity .ne. 1 then call error
$		openssl ts -reply -queryfile 'p1' -text -token_out
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ verify_time_stamp_response:
$	subroutine
$
$		openssl ts -verify -queryfile 'p1' -in 'p2' -
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		if $severity .ne. 1 then call error
$		openssl ts -verify -data 'p3' -in 'p2' -
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ verify_time_stamp_token:
$	subroutine
$
$		# create the token from the response first
$		openssl ts -reply -in 'p2' -out 'p2'.token -token_out
$		if $severity .ne. 1 then call error
$		openssl ts -verify -queryfile 'p1' -in 'p2'.token -token_in \
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		if $severity .ne. 1 then call error
$		openssl ts -verify -data 'p3' -in 'p2'.token -token_in \
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ verify_time_stamp_response_fail:
$	subroutine
$
$		openssl ts -verify -queryfile 'p1' -in 'p2' -
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		# Checks if the verification failed, as it should have.
$		if $severity .ne. 1 then call error
$		write sys$output "Ok"
$	endsubroutine
$
$	! Main body ----------------------------------------------------------
$
$	write sys$output "Setting up TSA test directory..."
$	call setup_dir
$
$	write sys$output "Creating CA for TSA tests..."
$	call create_ca
$
$	write sys$output "Creating tsa_cert1.pem TSA server cert..."
$	call create_tsa_cert 1 tsa_cert
$
$	write sys$output "Creating tsa_cert2.pem non-TSA server cert..."
$	call create_tsa_cert 2 non_tsa_cert
$
$	write sys$output "Creating req1.req time stamp request for file testtsa..."
$	call create_time_stamp_request1
$
$	write sys$output "Printing req1.req..."
$	call print_request req1.tsq
$
$	write sys$output "Generating valid response for req1.req..."
$	call create_time_stamp_response req1.tsq resp1.tsr tsa_config1
$
$	write sys$output "Printing response..."
$	call print_response resp1.tsr
$
$	write sys$output "Verifying valid response..."
$	call verify_time_stamp_response req1.tsq resp1.tsr ../testtsa
$
$	write sys$output "Verifying valid token..."
$	call verify_time_stamp_token req1.tsq resp1.tsr ../testtsa
$
$	! The tests below are commented out, because invalid signer certificates
$	! can no longer be specified in the config file.
$
$	! write sys$output "Generating _invalid_ response for req1.req..."
$	! call create_time_stamp_response req1.tsq resp1_bad.tsr tsa_config2
$
$	! write sys$output "Printing response..."
$	! call print_response resp1_bad.tsr
$
$	! write sys$output "Verifying invalid response, it should fail..."
$	! call verify_time_stamp_response_fail req1.tsq resp1_bad.tsr
$
$	write sys$output "Creating req2.req time stamp request for file testtsa..."
$	call create_time_stamp_request2
$
$	write sys$output "Printing req2.req..."
$	call print_request req2.tsq
$
$	write sys$output "Generating valid response for req2.req..."
$	call create_time_stamp_response req2.tsq resp2.tsr tsa_config1
$
$	write sys$output "Checking '-token_in' and '-token_out' options with '-reply'..."
$	call time_stamp_response_token_test req2.tsq resp2.tsr
$
$	write sys$output "Printing response..."
$	call print_response resp2.tsr
$
$	write sys$output "Verifying valid response..."
$	call verify_time_stamp_response req2.tsq resp2.tsr ../testtsa
$
$	write sys$output "Verifying response against wrong request, it should fail..."
$	call verify_time_stamp_response_fail req1.tsq resp2.tsr
$
$	write sys$output "Verifying response against wrong request, it should fail..."
$	call verify_time_stamp_response_fail req2.tsq resp1.tsr
$
$	write sys$output "Creating req3.req time stamp request for file CAtsa.cnf..."
$	call create_time_stamp_request3
$
$	write sys$output "Printing req3.req..."
$	call print_request req3.tsq
$
$	write sys$output "Verifying response against wrong request, it should fail..."
$	call verify_time_stamp_response_fail req3.tsq resp1.tsr
$
$	write sys$output "Cleaning up..."
$	call clean_up_dir
$
$	exit

$!
$! A few very basic tests for the 'ts' time stamping authority command.
$!
$
$	__arch := VAX
$	if f$getsyi("cpu") .ge. 128 then __arch := AXP
$	exe_dir := sys$disk:[-.'__arch'.exe.apps]
$
$	openssl := mcr 'exe_dir'openssl
$	OPENSSL_CONF := [-]CAtsa.cnf
$
$ error:
$	subroutine
$		write sys$error "TSA test failed!"
$		exit 3
$	endsubroutine
$
$ setup_dir:
$	subroutine
$
$		if f$search("tsa.dir") .nes ""
$		then
$			@[-.util]deltree [.tsa]*.*
$ 			set file/prot=(S:RWED,O:RWED,G:RWED,W:RWED) tsa.dir;*
$ 			delete tsa.dir;*
$		endif
$
$		create/dir [.tsa]
$		set default [.tsa]
$	endsubroutine
$
$ clean_up_dir:
$	subroutine
$
$		set default [-]
$		@[-.util]deltree [.tsa]*.*
$ 		set file/prot=(S:RWED,O:RWED,G:RWED,W:RWED) tsa.dir;*
$ 		delete tsa.dir;*
$	endsubroutine
$
$ create_ca:
$	subroutine
$
$		write sys$output "Creating a new CA for the TSA tests..."
$		@[--.util]deltree [.demoCA]*.*
$
$		open/write file VMStsa-response.create_ca
$		write file ""
$		write file "HU"
$		write file "Budapest"
$		write file "Budapest"
$		write file "Gov-CA Ltd."
$		write file "ca1"
$		close file
$		open/read sys$ca_input VMStsa-response.create_ca
$		@[--.apps]CA.com -input sys$ca_input -newca
$		save_severity = $severity
$		close sys$ca_input
$		if save_severity .ne. 1 then call error
$	endsubroutine
$
$ create_tsa_cert:
$	subroutine
$
$		INDEX=p1
$		EXT=p2
$		open/write file VMStsa-response1.create_tsa_cert
$		write file "HU"
$		write file "Budapest"
$		write file "Buda"
$		write file "Hun-TSA Ltd."
$		write file "tsa",INDEX
$		close file
$		define/user sys$input VMStsa-response.create_tsa_cert
$		openssl req -new -
			-out tsa_req'INDEX'.pem -keyout tsa_key'INDEX'.pem
$		if $severity .ne. 1 then call error
$
$		open/write file VMStsa-response2.create_tsa_cert
$		write file "y"
$		write file "y"
$		close file
$		define/user sys$input VMStsa-response.create_tsa_cert
$		openssl ca -in tsa_req'INDEX'.pem -out tsa_cert'INDEX'.pem -
			-extensions "''EXT'"
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ print_request:
$	subroutine
$
$		openssl ts -query -in 'p1' -text
$	endsubroutine
$
$ create_time_stamp_request1: subroutine
$
$		openssl ts -query -data [-]testtsa.com -policy tsa_policy1 -
			-cert -out req1.tsq
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ create_time_stamp_request2: subroutine
$
$		openssl ts -query -data [-]testtsa.com -policy tsa_policy2 -
			-no_nonce -out req2.tsq
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ create_time_stamp_request3: subroutine
$
$		openssl ts -query -data [-]CAtsa.cnf -no_nonce -out req3.tsq
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ print_response:
$	subroutine
$
$		openssl ts -reply -in 'p1' -text
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ create_time_stamp_response:
$	subroutine
$
$		openssl ts -reply -section 'p3' -queryfile 'p1' -out 'p2'
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ time_stamp_response_token_test:
$	subroutine
$
$		RESPONSE2:='p2'.copy_tsr
$		TOKEN_DER:='p2'.token_der
$		openssl ts -reply -in 'p2' -out 'TOKEN_DER' -token_out
$		if $severity .ne. 1 then call error
$		openssl ts -reply -in 'TOKEN_DER' -token_in -out 'RESPONSE2'
$		if $severity .ne. 1 then call error
$		backup/compare 'RESPONSE2' 'p2'
$		if $severity .ne. 1 then call error
$		openssl ts -reply -in 'p2' -text -token_out
$		if $severity .ne. 1 then call error
$		openssl ts -reply -in 'TOKEN_DER' -token_in -text -token_out
$		if $severity .ne. 1 then call error
$		openssl ts -reply -queryfile 'p1' -text -token_out
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ verify_time_stamp_response:
$	subroutine
$
$		openssl ts -verify -queryfile 'p1' -in 'p2' -
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		if $severity .ne. 1 then call error
$		openssl ts -verify -data 'p3' -in 'p2' -
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ verify_time_stamp_token:
$	subroutine
$
$		# create the token from the response first
$		openssl ts -reply -in 'p2' -out 'p2'.token -token_out
$		if $severity .ne. 1 then call error
$		openssl ts -verify -queryfile 'p1' -in 'p2'.token -token_in \
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		if $severity .ne. 1 then call error
$		openssl ts -verify -data 'p3' -in 'p2'.token -token_in \
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		if $severity .ne. 1 then call error
$	endsubroutine
$
$ verify_time_stamp_response_fail:
$	subroutine
$
$		openssl ts -verify -queryfile 'p1' -in 'p2' -
			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
$		# Checks if the verification failed, as it should have.
$		if $severity .ne. 1 then call error
$		write sys$output "Ok"
$	endsubroutine
$
$	! Main body ----------------------------------------------------------
$
$	write sys$output "Setting up TSA test directory..."
$	call setup_dir
$
$	write sys$output "Creating CA for TSA tests..."
$	call create_ca
$
$	write sys$output "Creating tsa_cert1.pem TSA server cert..."
$	call create_tsa_cert 1 tsa_cert
$
$	write sys$output "Creating tsa_cert2.pem non-TSA server cert..."
$	call create_tsa_cert 2 non_tsa_cert
$
$	write sys$output "Creating req1.req time stamp request for file testtsa..."
$	call create_time_stamp_request1
$
$	write sys$output "Printing req1.req..."
$	call print_request req1.tsq
$
$	write sys$output "Generating valid response for req1.req..."
$	call create_time_stamp_response req1.tsq resp1.tsr tsa_config1
$
$	write sys$output "Printing response..."
$	call print_response resp1.tsr
$
$	write sys$output "Verifying valid response..."
$	call verify_time_stamp_response req1.tsq resp1.tsr ../testtsa
$
$	write sys$output "Verifying valid token..."
$	call verify_time_stamp_token req1.tsq resp1.tsr ../testtsa
$
$	! The tests below are commented out, because invalid signer certificates
$	! can no longer be specified in the config file.
$
$	! write sys$output "Generating _invalid_ response for req1.req..."
$	! call create_time_stamp_response req1.tsq resp1_bad.tsr tsa_config2
$
$	! write sys$output "Printing response..."
$	! call print_response resp1_bad.tsr
$
$	! write sys$output "Verifying invalid response, it should fail..."
$	! call verify_time_stamp_response_fail req1.tsq resp1_bad.tsr
$
$	write sys$output "Creating req2.req time stamp request for file testtsa..."
$	call create_time_stamp_request2
$
$	write sys$output "Printing req2.req..."
$	call print_request req2.tsq
$
$	write sys$output "Generating valid response for req2.req..."
$	call create_time_stamp_response req2.tsq resp2.tsr tsa_config1
$
$	write sys$output "Checking '-token_in' and '-token_out' options with '-reply'..."
$	call time_stamp_response_token_test req2.tsq resp2.tsr
$
$	write sys$output "Printing response..."
$	call print_response resp2.tsr
$
$	write sys$output "Verifying valid response..."
$	call verify_time_stamp_response req2.tsq resp2.tsr ../testtsa
$
$	write sys$output "Verifying response against wrong request, it should fail..."
$	call verify_time_stamp_response_fail req1.tsq resp2.tsr
$
$	write sys$output "Verifying response against wrong request, it should fail..."
$	call verify_time_stamp_response_fail req2.tsq resp1.tsr
$
$	write sys$output "Creating req3.req time stamp request for file CAtsa.cnf..."
$	call create_time_stamp_request3
$
$	write sys$output "Printing req3.req..."
$	call print_request req3.tsq
$
$	write sys$output "Verifying response against wrong request, it should fail..."
$	call verify_time_stamp_response_fail req3.tsq resp1.tsr
$
$	write sys$output "Cleaning up..."
$	call clean_up_dir
$
$	exit


Add /base to snoyman.com

Add /base to snoyman.com


Replace example key with some nonsense text


Repoint jeaye.com

Repoint jeaye.com


Update submodule

Update submodule


yesodweb.com update

yesodweb.com update


Add expires header to assets.

Add expires header to assets.

# Located in: /etc/nginx/sites-available/www.gitlab.com

# You may add here your
# server {
#	...
# }
# statements for each of your virtual hosts to this file

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# http://wiki.nginx.org/Pitfalls
# http://wiki.nginx.org/QuickStart
# http://wiki.nginx.org/Configuration
#
# Generally, you will want to move this file somewhere, and start with a clean
# file but keep this around for reference. Or just disable in sites-enabled.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

server {
  listen 80;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;
  return 301 https://www.gitlab.com$request_uri;
}

# HTTPS server
#
server {
  listen 443;
  root /home/deploy/public;
  index index.html;
  add_header X-Frame-Options DENY;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;

  ssl on;
  ssl_certificate /etc/ssl/www.gitlab.com.bundle;
  ssl_certificate_key /etc/ssl/www.gitlab.com.key;
  ssl_session_timeout 5m;
  # ssl_protocols SSLv3 TLSv1;
  ssl_ciphers RC4:HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers on;

  gzip on; # Enable gzip compression
  gzip_comp_level 6; # Compression level
  gzip_vary on; # Proxies can store both compressed and uncompressed version of the content
  gzip_proxied any; # Enable compression for all requests when request is coming from a proxy
  gzip_types text/plain text/css application/json application/javascript application/x-javascript text/javascript text/xml application/xml application/rss+xml application/atom+xml application/rdf+xml;
  gzip_buffers 16 8k; # Number and the size of the compression buffers
  gzip_disable "MSIE [1-6].(?!.*SV1)"; # Disables gzip compression for browsers not supporting it, < IE 6

  rewrite ^/features/ https://www.gitlab.com/gitlab-ee/ permanent;
  rewrite ^/features https://www.gitlab.com/gitlab-ee/ permanent;
  location / {
  }
  location ~ ^/subscription/(basic|standard|success)$ {
     proxy_pass http://localhost:4567;
     proxy_set_header  X-Real-IP  $remote_addr;
  }
  location ~*  \.(jpg|jpeg|png|gif|ico|css|js)$ {
   expires 365d;
  }
}

# Located in: /etc/nginx/sites-available/www.gitlab.com

# You may add here your
# server {
#	...
# }
# statements for each of your virtual hosts to this file

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# http://wiki.nginx.org/Pitfalls
# http://wiki.nginx.org/QuickStart
# http://wiki.nginx.org/Configuration
#
# Generally, you will want to move this file somewhere, and start with a clean
# file but keep this around for reference. Or just disable in sites-enabled.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

server {
  listen 80;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;
  return 301 https://www.gitlab.com$request_uri;
}

# HTTPS server
#
server {
  listen 443;
  root /home/deploy/public;
  index index.html;
  add_header X-Frame-Options DENY;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;

  ssl on;
  ssl_certificate /etc/ssl/www.gitlab.com.bundle;
  ssl_certificate_key /etc/ssl/www.gitlab.com.key;
  ssl_session_timeout 5m;
  # ssl_protocols SSLv3 TLSv1;
  ssl_ciphers RC4:HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers on;

  gzip on; # Enable gzip compression
  gzip_comp_level 6; # Compression level
  gzip_vary on; # Proxies can store both compressed and uncompressed version of the content
  gzip_proxied any; # Enable compression for all requests when request is coming from a proxy
  gzip_types text/plain text/css application/json application/javascript application/x-javascript text/javascript text/xml application/xml application/rss+xml application/atom+xml application/rdf+xml;
  gzip_buffers 16 8k; # Number and the size of the compression buffers
  gzip_disable "MSIE [1-6].(?!.*SV1)"; # Disables gzip compression for browsers not supporting it, < IE 6

  rewrite ^/features/ https://www.gitlab.com/gitlab-ee/ permanent;
  rewrite ^/features https://www.gitlab.com/gitlab-ee/ permanent;
  location / {
  }
  location ~ ^/subscription/(basic|standard|success)$ {
     proxy_pass http://localhost:4567;
     proxy_set_header  X-Real-IP  $remote_addr;
  }
}


More explicit redirection.

More explicit redirection.

# Located in: /etc/nginx/sites-available/www.gitlab.com

# You may add here your
# server {
#	...
# }
# statements for each of your virtual hosts to this file

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# http://wiki.nginx.org/Pitfalls
# http://wiki.nginx.org/QuickStart
# http://wiki.nginx.org/Configuration
#
# Generally, you will want to move this file somewhere, and start with a clean
# file but keep this around for reference. Or just disable in sites-enabled.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

server {
  listen 80;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;
  return 301 https://www.gitlab.com$request_uri;
}

# HTTPS server
#
server {
	listen 443;
	root /home/deploy/public;
	index index.html;
        add_header X-Frame-Options DENY;
	server_name localhost www.gitlab.com blue-moon.gitlap.com;
    server_tokens off;

	ssl on;
	ssl_certificate /etc/ssl/www.gitlab.com.pem;
	ssl_certificate_key /etc/ssl/www.gitlab.com.key;
	ssl_session_timeout 5m;
	# ssl_protocols SSLv3 TLSv1;
    ssl_ciphers RC4:HIGH:!aNULL:!MD5;
	ssl_prefer_server_ciphers on;

  rewrite ^/features/ https://www.gitlab.com/gitlab-ee/ permanent;
	location / {
	}
}

# Located in: /etc/nginx/sites-available/www.gitlab.com

# You may add here your
# server {
#	...
# }
# statements for each of your virtual hosts to this file

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# http://wiki.nginx.org/Pitfalls
# http://wiki.nginx.org/QuickStart
# http://wiki.nginx.org/Configuration
#
# Generally, you will want to move this file somewhere, and start with a clean
# file but keep this around for reference. Or just disable in sites-enabled.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

server {
  listen 80;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;
  return 301 https://www.gitlab.com$request_uri;
}

# HTTPS server
#
server {
	listen 443;
	root /home/deploy/public;
	index index.html;
        add_header X-Frame-Options DENY;
	server_name localhost www.gitlab.com blue-moon.gitlap.com;
    server_tokens off;

	ssl on;
	ssl_certificate /etc/ssl/www.gitlab.com.pem;
	ssl_certificate_key /etc/ssl/www.gitlab.com.key;
	ssl_session_timeout 5m;
	# ssl_protocols SSLv3 TLSv1;
    ssl_ciphers RC4:HIGH:!aNULL:!MD5;
	ssl_prefer_server_ciphers on;

  rewrite ^/features/ ^/gitlab-ee/ permanent;
	location / {
	}
}


Use api.quran.com for backend.

Use api.quran.com for backend.

server {
  listen   3000;
  server_name  api.quran.com;

  access_log  /var/log/nginx/localhost.access.log;

  location / {
    passenger_enabled on;
    passenger_user app;
    passenger_ruby /usr/bin/ruby2.2;
    passenger_app_env production;
    root   /home/app/quran/public;
    index  index.html index.htm;
  }
}

server {
  listen   3000;
  server_name  quran;

  access_log  /var/log/nginx/localhost.access.log;

  location / {
    passenger_enabled on;
    passenger_user app;
    passenger_ruby /usr/bin/ruby2.2;
    passenger_app_env production;
    root   /home/app/quran/public;
    index  index.html index.htm;
  }
}


more fixes in nginx config file

more fixes in nginx config file

#mran.revolutionanalytics.com
#Chris Mosetick 2014-06-12
#last update    2014-07-24

server {
        #listen on IPv4 and IPv6 addresses at the same time
        listen 80;
        listen [::]:80;

        #directory in the file system to serve web pages and packages from
        #this is a detachable block disk formatted with ZFS that can be easily moved to another server
	#www dir is for landing page stuff
        root /MRAN/www;
        index index.html index.htm;

        # public facing domain name for this vhost
        server_name marmoset.revolutionanalytics.com;

        location /snapshots {
                try_files $uri $uri/ =404;
                #autoindex is needed since we are not serving up any html or php pages
                autoindex  on;
                # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules
                #snapshots is directory containing symlinks to various .zfs/snapshot dirs
        }

        location /metadata {
                try_files $uri $uri/ =404;
                autoindex on;
		            # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules

        }

        location /diffs {
                try_files $uri $uri/ =404;
                autoindex on;
                # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules
        }

        location /accounting {
                try_files $uri $uri/ =404;
                autoindex on;
                # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules
        }

        location /history {
		try_files $uri $uri/ =404;
                autoindex on;
                # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules
                #history is symlink pointing to snapshots of the /MRAN/www FS itself
                #this URL is hidden right now, not on index.html
        }

        location /exports {
		try_files $uri $uri/ =404;
        	autoindex on;
        	# Uncomment to enable naxsi on this location
        	# include /etc/nginx/naxsi.rules
		#exports is symlink to zpool named exports
	}

}
#this last bracket is needed to close this vhost

#mran.revolutionanalytics.com
#Chris Mosetick 2014-06-12
#last update    2014-07-24

server {
        #listen on IPv4 and IPv6 addresses at the same time
        listen 80;
        listen [::]:80;

        #directory in the file system to serve web pages and packages from
        #this is a detachable block disk formatted with ZFS that can be easily moved to another server
	      #www dir is for landing page stuff
        root /MRAN/www;
        index index.html index.htm;

        # public facing domain name for this vhost
        server_name marmoset.revolutionanalytics.com;

        location /snapshots {
                try_files $uri $uri/ =404;
                #autoindex is needed since we are not serving up any html or php pages
                autoindex  on;
                # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules
                #snapshots is directory containing symlinks to various .zfs/snapshot dirs
        }

        location /metadata {
                try_files $uri $uri/ =404;
                autoindex on;
		            # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules

        }

        location /diffs {
                try_files $uri $uri/ =404;
                autoindex on;
                # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules
        }

        location /accounting {
                try_files $uri $uri/ =404;
                autoindex on;
                # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules
        }

        location /history {

                try_files $uri $uri/ =404;
                autoindex on;
                # Uncomment to enable naxsi on this location
                # include /etc/nginx/naxsi.rules
                #history is symlink pointing to snapshots of the /MRAN/www FS itself
                #this URL is hidden right now, not on index.html
        }

        location /exports {
		            try_files $uri $uri/ =404;
        	      autoindex on;
        	      # Uncomment to enable naxsi on this location
        	      # include /etc/nginx/naxsi.rules

}
#this last bracket is needed to close this vhost


error: pathspec 'https/www.tr553.com/InterYield/bindevent.do?e=click' did not match any file(s) known to git


Update nginx

Update nginx

upstream app_fastonosql {
    server 127.0.0.1:8080;
}

server {
    listen 80;
    server_name fastonosql.com fastonosql;
    access_log /var/log/nginx/fastonosql.log;

    location / {
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header Host $http_host;
      proxy_set_header X-NginX-Proxy true;

      proxy_pass http://app_fastonosql/;
      proxy_redirect off;
    }
}

server {
    listen 80;
    server_name fastonosql.com;

    location / {
        proxy_set_header   X-Forwarded-For $remote_addr;
        proxy_set_header   Host $http_host;
        proxy_pass         "http://127.0.0.1:8080";
    }
}


Enable gzip compression in nginx conf file.

# Located in: /etc/nginx/sites-available/www.gitlab.com

# You may add here your
# server {
#	...
# }
# statements for each of your virtual hosts to this file

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# http://wiki.nginx.org/Pitfalls
# http://wiki.nginx.org/QuickStart
# http://wiki.nginx.org/Configuration
#
# Generally, you will want to move this file somewhere, and start with a clean
# file but keep this around for reference. Or just disable in sites-enabled.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

server {
  listen 80;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;
  return 301 https://www.gitlab.com$request_uri;
}

# HTTPS server
#
server {
  listen 443;
  root /home/deploy/public;
  index index.html;
  add_header X-Frame-Options DENY;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;

  ssl on;
  ssl_certificate /etc/ssl/www.gitlab.com.pem;
  ssl_certificate_key /etc/ssl/www.gitlab.com.key;
  ssl_session_timeout 5m;
  # ssl_protocols SSLv3 TLSv1;
  ssl_ciphers RC4:HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers on;

  gzip on; # Enable gzip compression
  gzip_comp_level 6; # Compression level
  gzip_vary on; # Proxies can store both compressed and uncompressed version of the content
  gzip_proxied any; # Enable compression for all requests when request is coming from a proxy
  gzip_types text/plain text/css application/json application/javascript application/x-javascript text/javascript text/xml application/xml application/rss+xml application/atom+xml application/rdf+xml;
  gzip_buffers 16 8k; # Number and the size of the compression buffers
  gzip_disable "MSIE [1-6].(?!.*SV1)"; # Disables gzip compression for browsers not supporting it, < IE 6

  location / {
  }
}

# Located in: /etc/nginx/sites-available/www.gitlab.com

# You may add here your
# server {
#	...
# }
# statements for each of your virtual hosts to this file

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# http://wiki.nginx.org/Pitfalls
# http://wiki.nginx.org/QuickStart
# http://wiki.nginx.org/Configuration
#
# Generally, you will want to move this file somewhere, and start with a clean
# file but keep this around for reference. Or just disable in sites-enabled.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

server {
  listen 80;
  server_name localhost www.gitlab.com blue-moon.gitlap.com;
  server_tokens off;
  return 301 https://www.gitlab.com$request_uri;
}

# HTTPS server
#
server {
	listen 443;
	root /home/deploy/public;
	index index.html;
        add_header X-Frame-Options DENY;
	server_name localhost www.gitlab.com blue-moon.gitlap.com;
    server_tokens off;

	ssl on;
	ssl_certificate /etc/ssl/www.gitlab.com.pem;
	ssl_certificate_key /etc/ssl/www.gitlab.com.key;
	ssl_session_timeout 5m;
	# ssl_protocols SSLv3 TLSv1;
    ssl_ciphers RC4:HIGH:!aNULL:!MD5;
	ssl_prefer_server_ciphers on;

	location / {
	}
}


Added uncaught exception catcher

Added uncaught exception catcher

#!/usr/bin/env node

// Load in dependencies
var assert = require('assert');
var url = require('url');
var Server = require('../');

// Set up CLI parser
var program = require('commander');
program.name = 'twolfson.com';
program
  .option('-e, --environment <environment>', 'Environment to run application as', process.env.NODE_ENV)
  .parse(process.argv);

// Assert that we were not passed common as a node env
var env =  program.environment || 'development';
assert.notEqual(env, 'common', '"common" is not a valid environment');

// Load our settings and start the server
var settings = require('../config').getSettings({env: env});
var server = new Server(settings);
server.listen();

// Notify the user that the server is running
var serverUrl = url.format(settings.url.external) + '/';
console.log('Server running at ' + serverUrl);

// Catch any uncaught exceptions
// DEV: This intentionally comes after server initialization and listen
process.on('uncaughtException', function (err) {
  settings.errorLogger('Uncaught exception: ', err);
});


Updated nginx

Updated nginx

server {
  listen static.emajliramokade.com:80;
  server_name static.emajliramokade.com;

  access_log /var/www/ekade/logs/nginx/plain-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/plain-error.log;

  location ~ ^/email/[^/]+/.*\.jpe?g$ {
    rewrite ^/email/([^/]+)/.* /public/Slike/$1/Email break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/thumbnail/[^/]+/.*\.jpe?g$ {
    rewrite ^/thumbnail/([^/]+)/.* /public/Slike/$1/Thumbnail break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/web/[^/]+/.*\.jpe?g$ {
    rewrite ^/web/([^/]+)/.* /public/Slike/$1/Web break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen emajliramokade.com:80;
  server_name .emajliramokade.com;

  access_log /var/www/ekade/logs/nginx/plain-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/plain-error.log;

  location / {
    rewrite ^(.*) https://$host$1 permanent;
  }
}

server {
  listen static.emajliramokade.com:443 ssl spdy;
  server_name static.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/emajliramokade.com.key;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/static-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/static-error.log;

  location ~ ^/email/[^/]+/.*\.jpe?g$ {
    rewrite ^/email/([^/]+)/.* /public/Slike/$1/Email break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/thumbnail/[^/]+/.*\.jpe?g$ {
    rewrite ^/thumbnail/([^/]+)/.* /public/Slike/$1/Thumbnail break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/web/[^/]+/.*\.jpe?g$ {
    rewrite ^/web/([^/]+)/.* /public/Slike/$1/Web break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/kade/.* {
    root /var/www/ekade;
    expires 30d;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen emajliramokade.com:443 ssl spdy;
  server_name .emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/emajliramokade.com.key;

  client_max_body_size 10M;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/wc-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/wc-error.log;

  location ~ ^/api/v1/.* {
    proxy_pass http://127.0.0.1:10060;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/api {
    proxy_pass http://10.5.17.1:10040;
    #proxy_pass http://127.0.0.1:10010;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/platform/.* {
    rewrite ^/platform/(.*) /kade/$1 break;
    proxy_pass https://platform.emajliramokade.com;
    proxy_set_header Host platform.emajliramokade.com;
    #proxy_pass https://10.5.6.100;
    #proxy_set_header Host snowball.dsl-platform.com;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

  location ~ ^/upload {
    #proxy_pass http://10.5.6.1:65432;
    proxy_pass http://127.0.0.1:10050;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/uploadPHP {
    #proxy_pass http://10.5.6.1:12345;
    proxy_pass http://127.0.0.1:10071;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/neven/(.*) {
    rewrite ^/neven/(.*) /$1 break;
    proxy_pass http://10.5.3.1:12000;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/robi/(.*) {
    rewrite ^/robi/(.*) /$1 break;
    proxy_pass http://10.5.6.7;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location / {
    allow 10.0.0.0/8;
    allow 85.10.50.226;
    deny all;

    root /var/www/ekade/code/javascript/site/;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

#  location / {
#    root /var/www/ekade/public;
#    deny all;
#    proxy_set_header REMOTE_ADDR $remote_addr;
#    proxy_set_header X-Real-IP $remote_addr;
#    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#    proxy_set_header HOST $host;
#  }
}

server {
  listen api.emajliramokade.com:443 ssl spdy;
  server_name api.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/emajliramokade.com.key;

  client_max_body_size 10M;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  location /feed.xml {
    rewrite ^ /apex/NOVINE.TEST_FEED break;
    proxy_pass http://127.0.0.1:8080;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/feed.js(on)?$ {
    rewrite ^ /apex/novine/novosti/vijesti break;
    proxy_pass http://127.0.0.1:8080;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen admin.emajliramokade.com:443 ssl spdy;
  server_name admin.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/emajliramokade.com.key;

  client_max_body_size 10M;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/admin-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/admin-error.log;

  location ~ ^/platform/.* {
    rewrite ^/platform/(.*) /kade/$1 break;
    proxy_pass https://platform.emajliramokade.com;
    proxy_set_header Host platform.emajliramokade.com;
    #proxy_pass https://10.5.6.100;
    #proxy_set_header Host snowball.dsl-platform.com;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

  location / {
    auth_basic            "Restricted";
    auth_basic_user_file  htpasswd;

    rewrite ^/$ /admin.html break;
    root /var/www/ekade/design/html;

    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen ivica.emajliramokade.com:443 ssl spdy;
  server_name ivica.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/wc.emajliramokade.com.crt-test;
  ssl_certificate_key /etc/certs/wc.emajliramokade.com.key;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/wc-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/wc-error.log;

  location / {
    proxy_pass http://10.5.16.1:10070;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen secure.emajliramokade.com:443 ssl spdy;
  server_name secure.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/wc.emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/wc.emajliramokade.com.key;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/wc-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/wc-error.log;

  location ~ ^/odjava/.* {
    rewrite ^/odjava/(.*)$ /apex/novine/odjave/odjave/$1 break;
    proxy_pass http://127.0.0.1:8080;
	proxy_method PUT;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen wc.emajliramokade.com:443 ssl spdy;
  server_name .emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/wc.emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/wc.emajliramokade.com.key;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/wc-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/wc-error.log;

  location / {
    deny all;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen static.emajliramokade.com:80;
  server_name static.emajliramokade.com;

  access_log /var/www/ekade/logs/nginx/plain-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/plain-error.log;

  location ~ ^/email/[^/]+/.*\.jpe?g$ {
    rewrite ^/email/([^/]+)/.* /public/Slike/$1/Email break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/thumbnail/[^/]+/.*\.jpe?g$ {
    rewrite ^/thumbnail/([^/]+)/.* /public/Slike/$1/Thumbnail break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/web/[^/]+/.*\.jpe?g$ {
    rewrite ^/web/([^/]+)/.* /public/Slike/$1/Web break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen emajliramokade.com:80;
  server_name .emajliramokade.com;

  access_log /var/www/ekade/logs/nginx/plain-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/plain-error.log;

  location / {
    rewrite ^(.*) https://$host$1 permanent;
  }
}

server {
  listen static.emajliramokade.com:443 ssl spdy;
  server_name static.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/emajliramokade.com.key;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/static-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/static-error.log;

  location ~ ^/email/[^/]+/.*\.jpe?g$ {
    rewrite ^/email/([^/]+)/.* /public/Slike/$1/Email break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/thumbnail/[^/]+/.*\.jpe?g$ {
    rewrite ^/thumbnail/([^/]+)/.* /public/Slike/$1/Thumbnail break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/web/[^/]+/.*\.jpe?g$ {
    rewrite ^/web/([^/]+)/.* /public/Slike/$1/Web break;
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/kade/.* {
    root /var/www/ekade;
    expires 30d;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen emajliramokade.com:443 ssl spdy;
  server_name .emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/emajliramokade.com.key;

  client_max_body_size 10M;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/wc-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/wc-error.log;

  location ~ ^/api/v1/.* {
    proxy_pass http://127.0.0.1:10060;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/api {
    proxy_pass http://10.5.17.1:10040;
    #proxy_pass http://127.0.0.1:10010;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/platform/.* {
    rewrite ^/platform/(.*) /kade/$1 break;
    #proxy_pass https://platform.emajliramokade.com;
    #proxy_set_header Host platform.emajliramokade.com;
    proxy_pass https://10.5.6.100;
    proxy_set_header Host snowball.dsl-platform.com;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

  location ~ ^/upload {
    #proxy_pass http://10.5.6.1:65432;
    proxy_pass http://127.0.0.1:10050;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/uploadPHP {
    #proxy_pass http://10.5.6.1:12345;
    proxy_pass http://127.0.0.1:10071;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/neven/(.*) {
    rewrite ^/neven/(.*) /$1 break;
    proxy_pass http://10.5.3.1:12000;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/robi/(.*) {
    rewrite ^/robi/(.*) /$1 break;
    proxy_pass http://10.5.6.7;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location / {
    allow 10.0.0.0/8;
    allow 85.10.50.226;
    deny all;

    root /var/www/ekade/code/javascript/site/;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

#  location / {
#    root /var/www/ekade/public;
#    deny all;
#    proxy_set_header REMOTE_ADDR $remote_addr;
#    proxy_set_header X-Real-IP $remote_addr;
#    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#    proxy_set_header HOST $host;
#  }
}

server {
  listen api.emajliramokade.com:443 ssl spdy;
  server_name api.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/emajliramokade.com.key;

  client_max_body_size 10M;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  location /feed.xml {
    rewrite ^ /apex/NOVINE.TEST_FEED break;
    proxy_pass http://127.0.0.1:8080;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }

  location ~ ^/feed.js(on)?$ {
    rewrite ^ /apex/novine/novosti/vijesti break;
    proxy_pass http://127.0.0.1:8080;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen admin.emajliramokade.com:443 ssl spdy;
  server_name admin.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/emajliramokade.com.key;

  client_max_body_size 10M;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/admin-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/admin-error.log;

  location ~ ^/platform/.* {
    rewrite ^/platform/(.*) /kade/$1 break;
    proxy_pass https://platform.emajliramokade.com;
    proxy_set_header Host platform.emajliramokade.com;
    #proxy_pass https://10.5.6.100;
    #proxy_set_header Host snowball.dsl-platform.com;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

  location / {
    auth_basic            "Restricted";
    auth_basic_user_file  htpasswd;

    rewrite ^/$ /admin.html break;
    root /var/www/ekade/design/html;

    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen ivica.emajliramokade.com:443 ssl spdy;
  server_name ivica.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/wc.emajliramokade.com.crt-test;
  ssl_certificate_key /etc/certs/wc.emajliramokade.com.key;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/wc-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/wc-error.log;

  location / {
    proxy_pass http://10.5.16.1:10070;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen secure.emajliramokade.com:443 ssl spdy;
  server_name secure.emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/wc.emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/wc.emajliramokade.com.key;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/wc-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/wc-error.log;

  location ~ ^/odjava/.* {
    rewrite ^/odjava/(.*)$ /apex/novine/odjave/odjave/$1 break;
    proxy_pass http://127.0.0.1:8080;
	proxy_method PUT;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}

server {
  listen wc.emajliramokade.com:443 ssl spdy;
  server_name .emajliramokade.com;

  ssl on;
  ssl_certificate     /etc/certs/wc.emajliramokade.com.crt;
  ssl_certificate_key /etc/certs/wc.emajliramokade.com.key;

  ssl_stapling on;
  resolver 8.8.8.8;
  ssl_verify_depth 1;
  ssl_stapling_verify on;
  ssl_trusted_certificate  /var/www/CAbundle.crt;

  keepalive_timeout         70;
  ssl_session_timeout       5m;
  ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers               ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
  ssl_prefer_server_ciphers on;
  ssl_session_cache         shared:SSL:10m;

  access_log /var/www/ekade/logs/nginx/wc-access.log combined buffer=32k;
  error_log  /var/www/ekade/logs/nginx/wc-error.log;

  location / {
    deny all;
    proxy_set_header REMOTE_ADDR $remote_addr;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header HOST $host;
  }
}


Another snoyman.com update

Another snoyman.com update


Delete CNAMEwww.example.com

Delete CNAMEwww.example.com