nginx.conf.backup

server {
	server_name iop.cenanozen.com;
	root /var/www/iop/public;
	gzip_vary on;
        add_header Access-Control-Allow-Origin $http_origin;
        add_header Access-Control-Allow-Methods "GET,POST,OPTIONS";
	add_header Access-Control-Allow-Headers 'Origin,Content-Type,Accept';

	index index.php;

	location = /favicon.ico { access_log off; log_not_found off; }
	location ~ /\. { access_log off; log_not_found off; deny all; }

	location @rewrites {
		rewrite ^ /index.php last;
	}

	location ~ \.php$ {
		try_files $uri =404;
		if ($uri !~ "^/static/uploads/") {
			fastcgi_pass  unix:/var/run/php5-fpm.sock;
		}
		fastcgi_index  index.php;
		fastcgi_param  SCRIPT_FILENAME	$document_root$fastcgi_script_name;
		include fastcgi_params;
	}

	location / {
		try_files $uri $uri/ @rewrites;
 
if ($request_method = 'OPTIONS') {

add_header 'Access-Control-Allow-Origin' $http_origin;

#
# Om nom nom cookies
#

add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';

#
# Custom headers and headers various browsers *should* be OK with but aren't
#

add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

#
# Tell client that this pre-flight info is valid for 20 days
#

add_header 'Access-Control-Max-Age' 1728000;
add_header 'Content-Type' 'text/plain charset=UTF-8';
add_header 'Content-Length' 0;

return 204;
}

if ($request_method = 'POST') {

add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

}

if ($request_method = 'GET') {

add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
add_header 'Access-Control-Allow-Headers' 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

}

}

}