Xenforo XenForo 2.1 CDN using Cloudflare free plan :D

Free and not using Cloudflare on main Domain.
Just to save bandwidth and accelerate static files.

Code:

server {
    listen 443 ssl http2;
    server_name cdn.xf.com;
    include /usr/local/nginx/conf/ssl/xf.com_ssl.conf;

    access_log off;
    log_not_found off;
    error_log /home/nginx/domains/xf.com/cdn_error.log error;
    root /home/nginx/domains/xf.com/public;

    location /               { deny all; }
    location ~ \.(default|html|php|txt|xml)$ { deny all; }
   
    location /data/          { }
    location /js/            { }
    location /styles/        { }
    location ~ ^/(proxy.php) { include /usr/local/nginx/conf/php.conf; }

    include /usr/local/nginx/conf/staticfiles.conf;  
}

---

 

My fully working and updated config.

Code:

server {
    listen 80;
    server_name cdn.domain.com;
    return 301 https://cdn.domain.com$request_uri;
}

server {
    listen 443 ssl http2;
    server_name cdn.domain.com;
    include /usr/local/nginx/conf/ssl/domain.com/domain.com_ssl.conf;

    access_log off;
    log_not_found off;
    error_log /home/nginx/domains/domain.com/cdn_error.log error;
    root /home/nginx/domains/domain.com/public;

    location /                                { deny all; }
    location ~* \.(default|html|php|txt|xml)$ { deny all; }

    location ~* \.(gif|jpg|jpe|jpeg|png|ico)$ {
    gzip_static off;
    add_header Link "<https://domain.com$request_uri>; rel=\"canonical\"";
    add_header Access-Control-Allow-Origin *;
    add_header Cache-Control "public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800";
    expires 30d;
    break;
    }

    location ~* \.(3gp|wmv|avi|asf|asx|mpg|mpeg|mp4|pls|mp3|mid|wav|swf|flv|exe|zip|tar|rar|gz|tgz|bz2|uha|7z|doc|docx|xls|xlsx|pdf|iso|br)$ {
    gzip_static off;
    sendfile off;
    sendfile_max_chunk 1m;
    add_header Link "<https://domain.com$request_uri>; rel=\"canonical\"";
    add_header Access-Control-Allow-Origin *;
    add_header Cache-Control "public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800";
    expires 30d;
    break;
    }

    location ~* \.(js|json)$ {
    add_header Link "<https://domain.com$request_uri>; rel=\"canonical\"";
    add_header Access-Control-Allow-Origin *;
    add_header Cache-Control "public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800";
    expires 30d;
    break;
    }

    location ~* \.(css)$ {
    add_header Link "<https://domain.com$request_uri>; rel=\"canonical\"";
    add_header Access-Control-Allow-Origin *;
    add_header Cache-Control "public, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800";
    expires 30d;
    break;
    }

    location ~* \.(eot|svg|ttf|woff|woff2|less|otf|scss)$ {
    add_header Link "<https://domain.com$request_uri>; rel=\"canonical\"";
    add_header Access-Control-Allow-Origin *;
    add_header Cache-Control "public, must-revalidate, proxy-revalidate";
    expires 365d;
    break;
    }


}

 

Why ?

Just basic Cache Everything option.

 

Maybe, but static files won't have that header.

After 1 month

 

Just like this
https://www.keycdn.com/support/xenforo-cdn-integration

 

I would like to add, Xenforo can't capture all the static file or semi dynamic request that can be cache like css|manifest|proxy|sitemap.php, so I use this also:
http://nginx.org/en/docs/http/ngx_http_sub_module.html

 

No need to move files, just point the nginx config to the same directory as your main domain.