CustomBuild Nginx edition

if ($http_user_agent ~ MSIE) {
    rewrite ^(.*)$ /msie/$1 break;
}

if ($http_cookie ~* "id=([^;]+)(?:;|$)") {
    set $id $1;
}

if ($request_method = POST) {
    return 405;
}

if ($slow) {
    limit_rate 10k;
}

if ($invalid_referer) {
    return 403;
}

server {
	#Listen to port
	listen 80;

	#Specify hostnames to listen to
	server_name www.mywebsite.lol mywebsite.lol;

	#Document root
	root /home/mywebsite/public_html;

	#Only allow 2 IPs. Others are denied.
	allow 133.7.133.7;
	allow 133.7.133.7;
	deny all;

	#Rewrite everything that is passed to @rewrite
	location @rewrite {
		rewrite ^/(.*)$ /index.php?q=$1;
	}

	#Specific rules for styles
	location ~ ^/sites/*/files/styles/ {
		#Pass to @rewrite if doesn't exist
		try_files $uri @rewrite;

		#Never expire files (max caching @ client)
		expires max;
	}

	#Some security measures
	location ~ \..*/.*\.php$ {
		return 403;
	}

	#Default location. If doesn't exist pass to @rewrite
	location / {
		try_files $uri @rewrite;
	}

	#Pass PHP files to PHP-FPM. These lines can be easily brought back to only 2 lines
	location ~ \.php$ {
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_index index.php;
		fastcgi_pass php;
		include /etc/nginx/fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
		fastcgi_intercept_errors on;
		fastcgi_param SCRIPT_NAME $fastcgi_script_name;
	}

	#Disable hidden files/folders (security)
	location ~ /\. {
		#Don't log
		access_log off;
		log_not_found off; 

		#Deny
		deny all;
	}

	#Disable .ht files (such as .htaccess and .htpasswd) (security)
	location ~ /\.ht {
		#Don't log
		access_log off;
		log_not_found off; 

		#Deny
		deny  all;
	}
}