upstream ha {
	server 127.0.0.4:8080;
}

server {
	listen	80 default_server backlog=8192;
	server_name  localhost;
	
	location / {
		root html;
		index index.html index.htm;
	}

	location /kw_monitor/ {
		alias /home/kw_monitor/conf/;
	}

	location /NginxStatus {
		stub_status             on;
		#auth_basic              "NginxStatus";
		#auth_basic_user_file conf/htpasswd;
		allow 127.0.0.1;
		allow 60.28.201.11;
		allow 192.168.0.0/16;
		allow 124.42.14.0/24;
		allow 211.157.146.0/24;
		deny all;
	}

	location /nstatus {
		allow 127.0.0.1;
		allow 192.168.0.0/16;
		allow 124.42.14.0/24;
		allow 211.157.146.0/24;
		deny all;

		check_status;
		access_log off;
	}
}

server {
	listen      80;
	server_name ra01.sycdn.kuwo.cn ra02.sycdn.kuwo.cn ra03.sycdn.kuwo.cn ra04.sycdn.kuwo.cn ra05.sycdn.kuwo.cn;
	server_name rb01.sycdn.kuwo.cn rb02.sycdn.kuwo.cn rb03.sycdn.kuwo.cn rb04.sycdn.kuwo.cn rb05.sycdn.kuwo.cn;
	server_name rc01.sycdn.kuwo.cn rc02.sycdn.kuwo.cn rc03.sycdn.kuwo.cn rc04.sycdn.kuwo.cn rc05.sycdn.kuwo.cn;
	server_name rd01.sycdn.kuwo.cn rd02.sycdn.kuwo.cn rd03.sycdn.kuwo.cn rd04.sycdn.kuwo.cn rd05.sycdn.kuwo.cn;

	root   html;

	proxy_next_upstream error timeout http_503 http_500 http_502 http_504 http_404;
	proxy_intercept_errors on;
	proxy_set_header Host $host:80;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

	location / {
			root   html;
			index  index.html index.htm;
			
			include cdn_host_header.conf;

			# like lighttpd secdownload
			location ~ ^/(?<HASH>[[:xdigit:]]+)/(?<TIME>[^/]+)(?<PATH>/resource/.+)$ {
				set $PASS kuwo_web@1906;
				secure_link $HASH,$TIME+3600;
				secure_link_md5 $PASS$PATH$TIME;

				include cdn_host_header.conf;				
	
				if ($secure_link = "") { # invalid
					return 403;
				}

				if ($secure_link = 0) { # expired
					return 410;
				}

				if ($secure_link = 1) { # correct
					rewrite ^ $PATH break;
					proxy_pass http://ha;
				}
			}
				
			proxy_pass http://ha;
	}

    #location ~ .*\.(wma|mp3|ape|wmv|aac)$ {
    #        valid_referers none blocked kuwo.cn koowo.com  *.kuwo.cn *koowo.com; 
    #        if ($invalid_referer) 
    #              {   
    #               #rewrite ^/ http://$host/logo.png; 
    #               return 403; 
    #              }   
    #        expires      300d;## 
    #} 
}

server {
        listen      9000;
	server_name  localhost;
        root   html;
        index  index.html index.htm;

	allow 127.0.0.1;
	allow 60.28.201.0/24;
	allow 60.28.205.0/24;
	deny all;

	location / {
                root html;
                index index.html index.htm;

                if ($request_method = PURGE) {
                        proxy_pass http://ha;
                }
        }
}