Issue #2199229 by heliogabal - CiviCRM 4.4.4 needs change in nginx conf to prevent access to sensitive information.

Issue #2161115 - AdvAgg: Strictly follow RFC 2616 14.21 - Set expired date no more than 1 year in the future.

Nginx: Do not use separate location for /images/ URI shortcut to avoid conflicts with custom config includes.

Issue #2116395 by realityloop - Nginx: Extend protection for config files and use 404 instead of 403.

Nginx: Replace inappropriate, legacy keyword gulag with neutral and technically correct limreq everywhere.

Nginx: Separate support for static and dynamic .json requests/URIs to avoid breaking Services for GET requests.

This assumes that static .json files with fast 404 are expected only in the sites/foo.com/files tree. Everything else is expected to be dynamic and sent to Drupal via Speed Booster caching layer only.

See http://trac.nginx.org/nginx/ticket/306 for context and more details.

Nginx: Add support for domain specific /robots.txt mapped to static files/$host.robots.txt to make it possible to manage it per domain also when Domain Access module is used.

Nginx: Deny spiders on glossary/* URI, as they are never allowed to crawl more than one page with args anyway.

We need an exception for /hosting/sites URI here.