Nginx + VirtualHost + Drupal 7.14 + Clean URLS

#######################################################
###  NginX  BEGIN                                  ####     
#######################################################
pid                   /var/run/nginx.pid;
user                  nginx;
worker_processes      4;
worker_rlimit_nofile  65536;

events {
    worker_connections  4096;
    #use epoll;
}

http {
  geoip_country      /usr/local/share/GeoIP/GeoIP.dat;
  ## MIME types
  include            /etc/nginx/fastcgi.conf;
  include            /etc/nginx/mime.types;
  default_type       application/octet-stream;

  ## Size Limits
  client_body_buffer_size         1k;
  client_header_buffer_size       1k;
  client_max_body_size           50m;
  large_client_header_buffers   3 3k;
  connection_pool_size           256;
  request_pool_size               4k;
  server_names_hash_bucket_size  128;

  ## Timeouts
  client_body_timeout             60;
  client_header_timeout           60;
  keepalive_timeout            75 20;
  send_timeout                    60;

  ## General Options
  ignore_invalid_headers          on;
  #  limit_zone gulag $binary_remote_addr 1m;
  recursive_error_pages           on;
  sendfile                        on;

  ## TCP options 
  tcp_nodelay on;
  tcp_nopush  on;

  ## Compression
  gzip              on;
  gzip_buffers      16 8k;
  gzip_comp_level   6;
  gzip_http_version 1.1;
  gzip_min_length   10;
  gzip_types        text/plain text/css image/png application/x-javascript text/xml application/xml application/xml+rss text/javascript image/x-icon;
  gzip_vary         on;
  gzip_proxied      any;
  gzip_disable      "MSIE [1-6]\.";

  log_format        main '$remote_addr - $remote_user [$time_local] '
                         '"$request" $status $bytes_sent ';

  #client_body_temp_path /var/sites/default/files/cache/nginx/client_body_temp 1 2;
  access_log            /var/log/nginx/domain.v02-access_log main;
  error_log             /var/log/nginx/domain.v02-error_log error;

  server {  
   #   limit_conn   gulag 10;
    listen       80;
    server_name  *.dev.domain.com;
    set $domain $host;
    if ($domain ~ "^(w{3}\.)?(.*?)\.?dev.domain.com") {
      set $domain $2;
    }

    root         /home/httpd/html/$domain.dev.domain.com/;
    index       index.php index.html;

    ## Deny some crawlers
    if ($http_user_agent ~* (HTTrack|HTMLParser|libwww) ) {
         return 444;
    }
    
    ## Required only when using purl, spaces & og for modules: ajax_comments, watcher and fasttoggle
    ## the /og path should be modified to match your default for og/purl URL for organic groups
    location ~* ^/og {
        rewrite ^/og\-(.*)/ajax_comments/(.*)$                  /index.php?q=ajax_comments/$2 last;
        rewrite ^/og\-(.*)/context/ajax-block-view$             /index.php?q=context/ajax-block-view last;
        rewrite ^/og\-(.*)/comment/reply/(.*)\?reload=1$        /index.php?q=comment/reply/$2&reload=1 last;
        rewrite ^/og\-(.*)/node/([0-9]+)/toggle/(.*)$           /index.php?q=node/$2/toggle/$3 last;
        rewrite ^/og\-(.*)/node/([0-9]+)/edit\?(.*)$            /index.php?q=node/$2/edit?$3 last;
        rewrite ^/og\-(.*)/user/([0-9]+)/watcher/toggle/(.*)$   /index.php?q=user/$2/watcher/toggle/$3 last;
        rewrite ^/(.*)$                                         /index.php?q=$1 last;
    }

    location / {
       ## Redirect some language paths
       rewrite ^/zh-hans$ /zh-hans/shanghai;
       rewrite ^/shanghai/chinese$ /zh-hans/shanghai;
       rewrite ^/zh-hant$ /zh-hant/hong-kong;
       rewrite ^/hongkong/chinese$ /zh-hant/hong-kong;
       rewrite ^/ja$ /ja/tokyo;
       rewrite ^/tokyo/jp$ /ja/tokyo;
       rewrite ^/tokyo/japanese$ /ja/tokyo;
       
       try_files $uri @cache;
    }

    location @cache {
       # return 405;
        if ( $request_method !~ ^(GET|HEAD)$ ) {
            return 405;
        }
        if ($http_cookie ~ "(DRUPAL_UID|DOMAINid)") {
            return 405;
        }
        error_page 405 = @drupal;
        add_header Expires "Tue, 24 Jan 1984 08:00:00 GMT";
        add_header Cache-Control "must-revalidate, no-cache, post-check=0, pre-check=0";
        add_header X-Header "Boost APP1.0";
        charset utf-8;
        try_files /sites/default/files/cache/normal/$host${uri}_$args.html /sites/default/files/cache/$host${uri}_$args.html @drupal;
     }

    location @drupal {
        ## Now simplified to reduce rewrites
        rewrite ^/(.*)$  /index.php?q=$1 last;
    }

    location ~* (/\..*|settings\.php$|\.(htaccess|engine|inc|info|install|module|profile|pl|po|sh|.*sql|theme|tpl(\.php)?|xtmpl)$|^(Entries.*|Repository|Root|Tag|Template))$ {
        deny all;
    }

    location ~* /sites/default/files/.*\.php$ {
        return 444;
    }

    location ~* /files/.*\.php$ {
        return 444;
    }

    location ~* /themes/.*\.php$ {
        return 444;
    }
      
    location ~ \.php$ {
          add_header X-Header "PHP APP1";
          try_files $uri @drupal;       #check for existence of php file
          fastcgi_pass 127.0.0.1:9000;  #php-fpm listening on port 9000
          fastcgi_index index.php;
    }

    location @uncached {
        access_log  off;
        expires  max; # max if using aggregator, otherwise sane expire time
    }

    location ~* files/imagecache/ {
        access_log         off;
        expires max;
        try_files $uri @drupal;  #imagecache support - now it works
    }

    location ~* ^.+\.(jpg|jpeg|gif|png|ico)$ {
        access_log      off;
        expires         30d;
        try_files $uri =404;
    }

    location ~* /crossdomain\.xml$ {
        access_log      off;
        expires         30d;
        try_files $uri =404;
    }

  } # end of server

  # Redirect all to live site
  server {
   #   limit_conn   gulag 10;
    listen       80;
    server_name  *.domain.com;

  }
  
# Include some other config file fomr the conf.d folder
include /etc/nginx/conf.d/git_deploy.conf;
include /etc/nginx/conf.d/git_deploy_mobile.conf;
#include /etc/nginx/conf.d/git_deploy_test.conf;

}

Hi Elfanjo,

Can you point me in the right direction about your post above? Not so techie in system administration field.