# vim: set ts=4 sw=4 expandtab syntax=nginx:
###############################################################################
#     AUTO-GENERATED CONFIGURATION FILE: ANY MANUAL CHANGES WILL BE LOST      #
###############################################################################
# ngxconf v2.4.24 (29 Apr 2026)
# Updated  : 2026-06-27 18:27:31-04:00
# Domain   : capitalforgeleague.sprowtt.com
# User     : spwtt



limit_req_zone $binary_remote_addr zone=spwtt_capitalforgeleague_sprowtt_com:1m rate=15r/m;





server {


    listen 199.250.200.167:80 ;
    http2 on;
    server_name capitalforgeleague.sprowtt.com capitalforgeleague.com mail.capitalforgeleague.com www.capitalforgeleague.com www.capitalforgeleague.sprowtt.com;


    root /home/spwtt/capitalforgeleague.com;

    gzip on;
    etag on;
    gzip_proxied any;
    gzip_comp_level 3;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    gzip_vary on;

    brotli_static on;
    brotli on;
    brotli_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    brotli_comp_level 4;

    proxy_bind 199.250.200.167;

    proxy_cache spwtt;
    proxy_ignore_headers Cache-Control Expires ;
    proxy_cache_valid 200 14400s;
    proxy_cache_valid 406 0s;
    proxy_cache_valid 404 10s;
    proxy_cache_valid 500 0;
    proxy_cache_use_stale updating error timeout http_502 http_503 http_504;
    proxy_cache_lock on;
    proxy_cache_key "$scheme$request_method$host$request_uri";
    proxy_cache_convert_head on;

    include errors.conf;


    rewrite ^/cpanel/?$ https://$hostname:2083/ permanent;
    rewrite ^/whm/?$ https://$hostname:2087/ permanent;
    rewrite ^/webmail/?$ https://$hostname:2096/ permanent;


    tcp_nodelay off;

    if ($request_uri ~ "^(.*/wp-admin|.*/administrator|/admin|/user|.*/wp-cron\.php|/.*login\.php|/opcache\.php|.*/xmlrpc\.php|.*/phpinfo\.php|/basket.*|/cart.*|/my-account.*|/checkout.*|/addons.*)") {
        set $cache_bypass 1;
    }



    location ~ "^(/wp-content/uploads)" {
        expires 7d;
        add_header Cache-Control "public, must-revalidate";
        add_header X-Proxy-Cache "STATIC/PATH";
    }

    if ($http_cookie ~ "(_logged_in_|items_in_cart|jsid)") {
        set $cache_bypass 1;
    }

    location ~ "^(/.*login\.php|.*/xmlrpc\.php|.*/wp-cron\.php)" {
        limit_req_status 429;
        limit_req zone=spwtt_capitalforgeleague_sprowtt_com burst=8 nodelay;

        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_no_cache 1;
        proxy_cache_bypass 1;
        add_header X-Proxy-Cache $upstream_cache_status;


        proxy_pass http://199.250.200.167:8080;
    }


    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_no_cache $cache_bypass;
        proxy_cache_bypass $cache_bypass;
        add_header X-Proxy-Cache $upstream_cache_status;


        proxy_pass http://199.250.200.167:8080;
    }

    location ~ ^/purge(/.*) {
        proxy_cache_purge spwtt "$scheme$request_method$host$1";
    }
}

server {
    listen 199.250.200.167:80;

    http2 on;


    server_name cpanel.capitalforgeleague.sprowtt.com cpanel.capitalforgeleague.com cpcontacts.capitalforgeleague.sprowtt.com autodiscover.capitalforgeleague.sprowtt.com cpcalendars.capitalforgeleague.sprowtt.com ;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/spwtt/capitalforgeleague.com;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 199.250.200.167;


        proxy_pass http://199.250.200.167:2082/;

    }

}

server {
    listen 199.250.200.167:80;

    http2 on;


    server_name webmail.capitalforgeleague.sprowtt.com webmail.capitalforgeleague.com ;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/spwtt/capitalforgeleague.com;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 199.250.200.167;


        proxy_pass http://199.250.200.167:8080/;

    }

}
 server {
    listen 199.250.200.167:80;

    http2 on;


    server_name whm.capitalforgeleague.sprowtt.com ;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/spwtt/capitalforgeleague.com;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 199.250.200.167;


        proxy_pass http://199.250.200.167:2086/;

    }

}

server {
    listen 199.250.200.167:80;

    http2 on;


    server_name webdisk.capitalforgeleague.sprowtt.com ;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/spwtt/capitalforgeleague.com;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 199.250.200.167;


        proxy_pass http://199.250.200.167:2077/;

    }

}


server {


    listen 199.250.200.167:443 ssl ;
    http2 on;
    server_name capitalforgeleague.sprowtt.com capitalforgeleague.com mail.capitalforgeleague.com www.capitalforgeleague.com www.capitalforgeleague.sprowtt.com;

    ssl_certificate /var/nginx/certs/capitalforgeleague-sprowtt-com.pem;
    ssl_certificate_key /var/nginx/certs/capitalforgeleague-sprowtt-com.key;


    root /home/spwtt/capitalforgeleague.com;

    gzip on;
    etag on;
    gzip_proxied any;
    gzip_comp_level 3;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    gzip_vary on;

    brotli_static on;
    brotli on;
    brotli_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    brotli_comp_level 4;

    proxy_bind 199.250.200.167;

    proxy_cache spwtt;
    proxy_ignore_headers Cache-Control Expires ;
    proxy_cache_valid 200 14400s;
    proxy_cache_valid 406 0s;
    proxy_cache_valid 404 10s;
    proxy_cache_valid 500 0;
    proxy_cache_use_stale updating error timeout http_502 http_503 http_504;
    proxy_cache_lock on;
    proxy_cache_key "$scheme$request_method$host$request_uri";
    proxy_cache_convert_head on;

    include errors.conf;


    rewrite ^/cpanel/?$ https://$hostname:2083/ permanent;
    rewrite ^/whm/?$ https://$hostname:2087/ permanent;
    rewrite ^/webmail/?$ https://$hostname:2096/ permanent;


    tcp_nodelay off;

    if ($request_uri ~ "^(.*/wp-admin|.*/administrator|/admin|/user|.*/wp-cron\.php|/.*login\.php|/opcache\.php|.*/xmlrpc\.php|.*/phpinfo\.php|/basket.*|/cart.*|/my-account.*|/checkout.*|/addons.*)") {
        set $cache_bypass 1;
    }



    location ~ "^(/wp-content/uploads)" {
        expires 7d;
        add_header Cache-Control "public, must-revalidate";
        add_header X-Proxy-Cache "STATIC/PATH";
    }

    if ($http_cookie ~ "(_logged_in_|items_in_cart|jsid)") {
        set $cache_bypass 1;
    }

    location ~ "^(/.*login\.php|.*/xmlrpc\.php|.*/wp-cron\.php)" {
        limit_req_status 429;
        limit_req zone=spwtt_capitalforgeleague_sprowtt_com burst=8 nodelay;

        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_no_cache 1;
        proxy_cache_bypass 1;
        add_header X-Proxy-Cache $upstream_cache_status;


        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_pass https://199.250.200.167:8443;
    }


    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_no_cache $cache_bypass;
        proxy_cache_bypass $cache_bypass;
        add_header X-Proxy-Cache $upstream_cache_status;


        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_pass https://199.250.200.167:8443;
    }

    location ~ ^/purge(/.*) {
        proxy_cache_purge spwtt "$scheme$request_method$host$1";
    }
}

server {
    listen 199.250.200.167:443 ssl;

    server_name cpanel.capitalforgeleague.sprowtt.com cpanel.capitalforgeleague.com cpcontacts.capitalforgeleague.sprowtt.com autodiscover.capitalforgeleague.sprowtt.com cpcalendars.capitalforgeleague.sprowtt.com ;

    ssl_certificate /var/nginx/certs/capitalforgeleague-sprowtt-com.pem;
    ssl_certificate_key /var/nginx/certs/capitalforgeleague-sprowtt-com.key;

    ssl_prefer_server_ciphers on;
    ssl_buffer_size 8k;

    ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256';
    ssl_ecdh_curve secp384r1;
    ssl_dhparam /var/nginx/dhparams.pem;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/spwtt/capitalforgeleague.com;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 199.250.200.167;

        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_set_header X-HTTPS 1;

        proxy_pass http://199.250.200.167:2082/;

    }

}

server {
    listen 199.250.200.167:443 ssl;

    server_name webmail.capitalforgeleague.sprowtt.com webmail.capitalforgeleague.com ;

    ssl_certificate /var/nginx/certs/capitalforgeleague-sprowtt-com.pem;
    ssl_certificate_key /var/nginx/certs/capitalforgeleague-sprowtt-com.key;

    ssl_prefer_server_ciphers on;
    ssl_buffer_size 8k;

    ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256';
    ssl_ecdh_curve secp384r1;
    ssl_dhparam /var/nginx/dhparams.pem;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/spwtt/capitalforgeleague.com;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 199.250.200.167;

        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_set_header X-HTTPS 1;

        proxy_pass http://199.250.200.167:8080/;

    }

}
 server {
    listen 199.250.200.167:443 ssl;

    server_name whm.capitalforgeleague.sprowtt.com ;

    ssl_certificate /var/nginx/certs/capitalforgeleague-sprowtt-com.pem;
    ssl_certificate_key /var/nginx/certs/capitalforgeleague-sprowtt-com.key;

    ssl_prefer_server_ciphers on;
    ssl_buffer_size 8k;

    ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256';
    ssl_ecdh_curve secp384r1;
    ssl_dhparam /var/nginx/dhparams.pem;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/spwtt/capitalforgeleague.com;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 199.250.200.167;

        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_set_header X-HTTPS 1;

        proxy_pass http://199.250.200.167:2086/;

    }

}

server {
    listen 199.250.200.167:443 ssl;

    server_name webdisk.capitalforgeleague.sprowtt.com ;

    ssl_certificate /var/nginx/certs/capitalforgeleague-sprowtt-com.pem;
    ssl_certificate_key /var/nginx/certs/capitalforgeleague-sprowtt-com.key;

    ssl_prefer_server_ciphers on;
    ssl_buffer_size 8k;

    ssl_protocols   TLSv1.2 TLSv1.3;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256';
    ssl_ecdh_curve secp384r1;
    ssl_dhparam /var/nginx/dhparams.pem;


    location ~ "^/(\.well-known\/|[A-Fa-f0-9]{32}.txt$)" {
        root /home/spwtt/capitalforgeleague.com;
    }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;

        proxy_bind 199.250.200.167;

        proxy_ssl_verify off;
        proxy_ssl_session_reuse off;
        proxy_ssl_name $http_host;
        proxy_ssl_server_name on;
        proxy_set_header X-HTTPS 1;

        proxy_pass http://199.250.200.167:2077/;

    }

}