# vim: set ts=4 sw=4 expandtab syntax=nginx:
###############################################################################
#     AUTO-GENERATED CONFIGURATION FILE: ANY MANUAL CHANGES WILL BE LOST      #
###############################################################################
# ngxconf v2.4.22 (24 Jul 2025)
# Updated  : 2025-10-22 16:09:27-07:00
# Domain   : ayaclass.com
# User     : ayaclass


proxy_cache_path /var/nginx/cache/ayaclass levels=1 keys_zone=ayaclass:128m inactive=1h;

limit_req_zone $binary_remote_addr zone=ayaclass_ayaclass_com:1m rate=15r/m;





server {


    listen 192.145.236.239:80 ;
    http2 on;
    server_name ayaclass.com mail.ayaclass.com www.ayaclass.com;


    root /home/ayaclass/public_html;

    gzip on;
    etag on;
    gzip_proxied any;
    gzip_comp_level 3;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    gzip_vary on;

    brotli_static on;
    brotli on;
    brotli_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    brotli_comp_level 4;

    proxy_bind 192.145.236.239;

    proxy_cache ayaclass;
    proxy_ignore_headers Cache-Control Expires ;
    proxy_cache_valid 200 14400s;
    proxy_cache_valid 406 0s;
    proxy_cache_valid 404 10s;
    proxy_cache_valid 500 0;
    proxy_cache_use_stale updating error timeout http_502 http_503 http_504;
    proxy_cache_lock on;
    proxy_cache_key "$scheme$request_method$host$request_uri";
    proxy_cache_convert_head on;

    include errors.conf;


    rewrite ^/cpanel/?$ https://$hostname:2083/ permanent;
    rewrite ^/whm/?$ https://$hostname:2087/ permanent;
    rewrite ^/webmail/?$ https://$hostname:2096/ permanent;


    tcp_nodelay off;

    if ($request_uri ~ "^(.*/wp-admin|.*/administrator|/admin|/user|.*/wp-cron\.php|/.*login\.php|/opcache\.php|.*/xmlrpc\.php|.*/phpinfo\.php|/basket.*|/cart.*|/my-account.*|/checkout.*|/addons.*)") {
        set $cache_bypass 1;
    }



    location ~ "^(/wp-content/uploads)" {
        expires 7d;
        add_header Cache-Control "public, must-revalidate";
        add_header X-Proxy-Cache "STATIC/PATH";
    }

    if ($http_cookie ~ "(_logged_in_|items_in_cart|jsid)") {
        set $cache_bypass 1;
    }

    location ~ "^(/.*login\.php|.*/xmlrpc\.php|.*/wp-cron\.php)" {
        limit_req_status 429;
        limit_req zone=ayaclass_ayaclass_com burst=8 nodelay;

        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_no_cache 1;
        proxy_cache_bypass 1;
        add_header X-Proxy-Cache $upstream_cache_status;


        proxy_pass http://192.145.236.239:8080;
    }


    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_no_cache $cache_bypass;
        proxy_cache_bypass $cache_bypass;
        add_header X-Proxy-Cache $upstream_cache_status;


        proxy_pass http://192.145.236.239:8080;
    }

    location ~ ^/purge(/.*) {
        proxy_cache_purge ayaclass "$scheme$request_method$host$1";
    }
}

server {

    listen 192.145.236.239:80;

    http2 on;


    server_name cpanel.ayaclass.com cpcontacts.ayaclass.com autodiscover.ayaclass.com cpcalendars.ayaclass.com ;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/ayaclass/public_html;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 192.145.236.239;

        proxy_pass http://192.145.236.239:2082/;
    }

}

server {

    listen 192.145.236.239:80;

    http2 on;


    server_name webmail.ayaclass.com ;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/ayaclass/public_html;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 192.145.236.239;

        proxy_pass http://192.145.236.239:8080/;
    }

}
 server {

    listen 192.145.236.239:80;

    http2 on;


    server_name whm.ayaclass.com ;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/ayaclass/public_html;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 192.145.236.239;

        proxy_pass http://192.145.236.239:2086/;
    }

}

server {

    listen 192.145.236.239:80;

    http2 on;


    server_name webdisk.ayaclass.com ;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/ayaclass/public_html;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 192.145.236.239;

        proxy_pass http://192.145.236.239:2077/;
    }

}


server {


    listen 192.145.236.239:443 ssl ;
    http2 on;
    server_name ayaclass.com mail.ayaclass.com www.ayaclass.com;

    ssl_certificate /var/nginx/certs/ayaclass-com.pem;
    ssl_certificate_key /var/nginx/certs/ayaclass-com.key;


    root /home/ayaclass/public_html;

    gzip on;
    etag on;
    gzip_proxied any;
    gzip_comp_level 3;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    gzip_vary on;

    brotli_static on;
    brotli on;
    brotli_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    brotli_comp_level 4;

    proxy_bind 192.145.236.239;

    proxy_cache ayaclass;
    proxy_ignore_headers Cache-Control Expires ;
    proxy_cache_valid 200 14400s;
    proxy_cache_valid 406 0s;
    proxy_cache_valid 404 10s;
    proxy_cache_valid 500 0;
    proxy_cache_use_stale updating error timeout http_502 http_503 http_504;
    proxy_cache_lock on;
    proxy_cache_key "$scheme$request_method$host$request_uri";
    proxy_cache_convert_head on;

    include errors.conf;


    rewrite ^/cpanel/?$ https://$hostname:2083/ permanent;
    rewrite ^/whm/?$ https://$hostname:2087/ permanent;
    rewrite ^/webmail/?$ https://$hostname:2096/ permanent;


    tcp_nodelay off;

    if ($request_uri ~ "^(.*/wp-admin|.*/administrator|/admin|/user|.*/wp-cron\.php|/.*login\.php|/opcache\.php|.*/xmlrpc\.php|.*/phpinfo\.php|/basket.*|/cart.*|/my-account.*|/checkout.*|/addons.*)") {
        set $cache_bypass 1;
    }



    location ~ "^(/wp-content/uploads)" {
        expires 7d;
        add_header Cache-Control "public, must-revalidate";
        add_header X-Proxy-Cache "STATIC/PATH";
    }

    if ($http_cookie ~ "(_logged_in_|items_in_cart|jsid)") {
        set $cache_bypass 1;
    }

    location ~ "^(/.*login\.php|.*/xmlrpc\.php|.*/wp-cron\.php)" {
        limit_req_status 429;
        limit_req zone=ayaclass_ayaclass_com burst=8 nodelay;

        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_no_cache 1;
        proxy_cache_bypass 1;
        add_header X-Proxy-Cache $upstream_cache_status;


        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_pass https://192.145.236.239:8443;
    }


    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_no_cache $cache_bypass;
        proxy_cache_bypass $cache_bypass;
        add_header X-Proxy-Cache $upstream_cache_status;


        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_pass https://192.145.236.239:8443;
    }

    location ~ ^/purge(/.*) {
        proxy_cache_purge ayaclass "$scheme$request_method$host$1";
    }
}

server {

    listen 192.145.236.239:443 ssl;

    server_name cpanel.ayaclass.com cpcontacts.ayaclass.com autodiscover.ayaclass.com cpcalendars.ayaclass.com ;

    ssl_certificate /var/nginx/certs/ayaclass-com.pem;
    ssl_certificate_key /var/nginx/certs/ayaclass-com.key;

    ssl_prefer_server_ciphers on;
    ssl_buffer_size 8k;

    ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256';
    ssl_ecdh_curve secp384r1;
    ssl_dhparam /var/nginx/dhparams.pem;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/ayaclass/public_html;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 192.145.236.239;

        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_set_header X-HTTPS 1;
        proxy_pass http://192.145.236.239:2082/;
    }

}

server {

    listen 192.145.236.239:443 ssl;

    server_name webmail.ayaclass.com ;

    ssl_certificate /var/nginx/certs/ayaclass-com.pem;
    ssl_certificate_key /var/nginx/certs/ayaclass-com.key;

    ssl_prefer_server_ciphers on;
    ssl_buffer_size 8k;

    ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256';
    ssl_ecdh_curve secp384r1;
    ssl_dhparam /var/nginx/dhparams.pem;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/ayaclass/public_html;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 192.145.236.239;

        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_set_header X-HTTPS 1;
        proxy_pass http://192.145.236.239:8080/;
    }

}
 server {

    listen 192.145.236.239:443 ssl;

    server_name whm.ayaclass.com ;

    ssl_certificate /var/nginx/certs/ayaclass-com.pem;
    ssl_certificate_key /var/nginx/certs/ayaclass-com.key;

    ssl_prefer_server_ciphers on;
    ssl_buffer_size 8k;

    ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256';
    ssl_ecdh_curve secp384r1;
    ssl_dhparam /var/nginx/dhparams.pem;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/ayaclass/public_html;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 192.145.236.239;

        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_set_header X-HTTPS 1;
        proxy_pass http://192.145.236.239:2086/;
    }

}

server {

    listen 192.145.236.239:443 ssl;

    server_name webdisk.ayaclass.com ;

    ssl_certificate /var/nginx/certs/ayaclass-com.pem;
    ssl_certificate_key /var/nginx/certs/ayaclass-com.key;

    ssl_prefer_server_ciphers on;
    ssl_buffer_size 8k;

    ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256';
    ssl_ecdh_curve secp384r1;
    ssl_dhparam /var/nginx/dhparams.pem;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/ayaclass/public_html;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 192.145.236.239;

        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_set_header X-HTTPS 1;
        proxy_pass http://192.145.236.239:2077/;
    }

}