server_name     galaxy.net-plus.bg _ 192.168.7.143;

    ssl on;

	# adjust root directory as needed
	root /var/www/html;
	index index.php index.html index.htm;

	location / {
			# This should allow the content to be retrieved from any location. If you're using this internally, you can probably remove most of this.
			add_header 'Access-Control-Allow-Origin' '*';
			add_header 'Access-Control-Expose-Headers' 'Content-Length';
			add_header 'Access-Control-Allow-Headers' 'Range';
			if ($request_method = 'OPTIONS') {
					add_header 'Access-Control-Allow-Origin' '*';
					add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
					#
					# Custom headers and headers various browsers *should* be OK with but aren't
					#
					add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
					#
					# Tell client that this pre-flight info is valid for 20 days
					#
					add_header 'Access-Control-Max-Age' 1728000;
					add_header 'Content-Type' 'text/plain charset=UTF-8';
					add_header 'Content-Length' 0;
					return 204;
			}
			if ($request_method = 'POST') {
					add_header 'Access-Control-Allow-Origin' '*';
					add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
					add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
			}
			if ($request_method = 'GET') {
					add_header 'Access-Control-Allow-Origin' '*';
					add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
					add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
			}

			# rewrite for pretty URLs. This is REQUIRED.
			rewrite /(.*)$ / break;
	}

	# php processor
	location ~ \.php$ {
			try_files $uri =404;
			fastcgi_pass 127.0.0.1:9000;
			fastcgi_index index.php;
			fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
			include fastcgi_params;
	}

	# Rewrite for index, popout player, reset form, and REST API. REQUIRED.
	rewrite /login(.*)$ /login.php last;
	rewrite /popout/(.*)$ /lib/popout.php last;
	rewrite /lostpass(.*)$ /reset.php last;
	rewrite /api/(.*)$ /api/index.php last;
	
	# exclude our data locations from URL rewrite. REQUIRED.
	location /css { }
	location /img { }
	location /inc { }
	location /js { }
	location /lib { }
	location /xsl { }
	location /profiles { }
	location /favicon.ico { }

	# Serve recorded sessions
	location /rec {
			root /var/tmp;
			autoindex off; # directory list prevented. Enable this if you want to see all your recordings at your.site/rec
	}

	# RTMP Stat
	location /stat {
			rtmp_stat all;
			rtmp_stat_stylesheet stat.xsl;
	}
	
	location /stat.xsl {
			root /var/www/html/xsl/;
	}

	# RTMP Control
	location /control {
			# add the IPs you want to have access to directly control streams. Minimum required is localhost and the public server IP, which is used by the site itself to start/stop recordings
			allow 127.0.0.1;
			allow all;
			deny all;
			rtmp_control all;
	}
	
	# used to grab viewercount
	location /nclients {
			satisfy any;
			allow all;
			deny all;
			proxy_pass https://galaxy.net-plus.bg/stat;
			xslt_stylesheet /var/www/html/xsl/nclients.xsl app='$arg_app' name='$arg_name';
			add_header Refresh "3; $request_uri";
	}

	# these pages not included, you must supply your own or leverage inc/404.php
	error_page   500 502 503 504  /50x.html;
	location = /50x.html {
			root   html;
	}

location /hls {
    root /var/tmp;
    add_header Cache-Control no-cache;
    types {
        application/vnd.apple.mpegurl m3u8;
        video/mp2t ts;
    }


}



    location ~ /.well-known {
            allow all;
    }