# gzip compression
gzip on;
gzip_min_length 1100;
gzip_buffers 4 8k;
gzip_proxied any;
gzip_types text/plain text/css application/x-javascript text/javascript application/json;
############################################
## uncomment next line to enable light API calls processing
#rewrite ^/api/([a-z][0-9a-z_]+)/?$ /api.php?type=$1 break;
############################################
## rewrite API2 calls to api.php (by now it is REST only)
rewrite ^/api/rest /api.php?type=rest last;
############################################
## TRACE and TRACK HTTP methods disabled to prevent XSS attacks
if ($request_method ~ "^TRAC[EK]") {
return 405;
}
############################################
## always send 404 on missing files in these folders
if ($uri !~ "^/(media|skin|js)/") {
set $rewrite_to_index 1;
}
###########################################
## Deny access to release notes to prevent disclosure of the installed Magento version
if ($uri ~* "/RELEASE_NOTES.txt") {
return 404;
}
# Don't rewrite if file exists
if (-e $request_filename) {
set $rewrite_to_index 0;
}
############################################
## rewrite everything else to index.php
if ($rewrite_to_index = "1") {
rewrite / /index.php;
}
############################################
## Prevent character encoding issues from server overrides
## If you still have problems, use the second line instead
charset off;
#charset utf-8;
############################################
## Add default Expires header
## http://developer.yahoo.com/performance/rules.html#expires
expires 365d;
##Taken from http://wiki.nginx.org/Magento
# Hide the system directories
location ~ ^/(app|includes|lib|media/downloadable|pkginfo|report/config.xml|var)/ {
internal;
}
# Hide the hidden files
location /. {
return 404;
}
…………………………………………………….
