server_name ~^(?<root>.+?)\.hostname\.domain\.ru$;

   root /var/www/$root/public;
 

$root = 1
echo ${HOSTNAME%%.*} = dev-test
должно получиться 1.dev-test.domain.com
 

#SSL settings for all vhost
ssl_protocols TLSv1  TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES256-SHA384;
ssl_stapling on;

ssl_protocols TLSv1.1 TLSv1.2;

config setup
        uniqueids=yes
        charondebug=1

conn %default 
        type=transport
        keyingtries=%forever
        authby=secret
        esp=aes256-sha1
        ike=aes256-sha1-modp1024
        keylife=8h
        keyexchange=ikev2
        dpddelay=30s
        dpdtimeout=120s
        dpdaction=hold
        left=*.*.*.*


conn balancer 
     leftsubnet=172.16.0.0/24
     right=*.*.*.*
     rightsubnet=192.168.70.0/24
     auto=start

config setup
        uniqueids=yes

conn %default 
        type=transport
        keyingtries=%forever
        authby=secret
        esp=aes256-sha1
        ike=aes256-sha1-modp1024
        keylife=8h
        keyexchange=ikev2
        dpddelay=30s
        dpdtimeout=120s
        dpdaction=restart
        mobike=no
        aggressive=yes
        inactivity=5000
        left=*.*.*.*




conn dev 
     leftsubnet=192.168.70.0/24
     right=*.*.*.*
     rightsubnet=172.16.0.0/24
     auto=start

initiating IKE_SA balancer01[9] to *.*.*.*
generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) N(REDIR_SUP) ]
sending packet: from *.*.*.*[500] to *.*.*.*[500] (1276 bytes)
received packet: from *.*.*.*[500] to *.*.*.*[500] (330 bytes)
parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) N(MULT_AUTH) ]
authentication of '*.*.*.*' (myself) with pre-shared key
establishing CHILD_SA balancer
generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH N(USE_TRANSP) SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_6_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]
sending packet: from *.*.*.*[4500] to *.*.*.*[4500] (444 bytes)
received packet: from *.*.*.*[4500] to *.*.*.*[4500] (124 bytes)
parsed IKE_AUTH response 1 [ IDr AUTH N(AUTH_LFT) N(TS_UNACCEPT) ]
authentication of '*.*.*.*' with pre-shared key successful
IKE_SA balancer01[9] established between *.*.*.*[*.*.*.*]...*.*.*.*[*.*.*.*]
scheduling reauthentication in 10205s
maximum IKE_SA lifetime 10745s
received TS_UNACCEPTABLE notify, no CHILD_SA built
failed to establish CHILD_SA, keeping IKE_SA
establishing connection 'balancer' failed

establishing CHILD_SA develspace
generating CREATE_CHILD_SA request 3 [ N(USE_TRANSP) SA No TSi TSr ]
sending packet: from *.*.*.*[4500] to *.*.*.*[4500] (332 bytes)
received packet: from *.*.*.*[4500] to *.*.*.*[4500] (76 bytes)
parsed CREATE_CHILD_SA response 3 [ N(TS_UNACCEPT) ]
received TS_UNACCEPTABLE notify, no CHILD_SA built
failed to establish CHILD_SA, keeping IKE_SA
establishing connection 'develspace' failed

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d [OR]
RewriteCond %{REQUEST_URI} ^/$
RewriteCond %{REQUEST_URI} !^/tasks/
RewriteRule (.*) index.php/$1

root /var/www/system;

server {
    listen 192.168.72.1:80;
    server_name system.net;

        
    access_log  /var/log/nginx/system.com.access.log;
    error_log  /var/log/nginx/system.com.error.log;


    location ~* /(images|css|js)/ {
           expires max;
    }

    location ~* \.(pdf)$ {
        access_log      off;
        expires           max;
    }

    location = /favicon.ico {
        try_files $uri =204;
        
    }

    location / {
        include fastcgi_params;
        fastcgi_param PATH_INFO $uri;
        fastcgi_param SCRIPT_NAME /wm.php;
        fastcgi_param SCRIPT_FILENAME $document_root/wm.php;
        fastcgi_pass dynamic;
    }


    location ~ ^/(tasks|tests|sso|webservice-0.3.1|rest|frame)/.+?\.php$ {
        try_files $uri /;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_pass dynamic;
    }

    location ~ ^/(status|ping)$ {
        include fastcgi_params;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_pass dynamic;
    }
}

stream {
    upstream stream_backend {
         server backend1.example.com:80;
         server backend2.example.com:80;
         server backend3.example.com:80;
    }
 
    server {
        listen                443 ssl;
        proxy_pass            stream_backend;
 
        ssl_certificate       /etc/ssl/certs/server.crt;
        ssl_certificate_key   /etc/ssl/certs/server.key;
        ssl_protocols         SSLv3 TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers           HIGH:!aNULL:!MD5;
        ssl_session_cache     shared:SSL:20m;
        ssl_session_timeout   4h;
        ssl_handshake_timeout 30s;
   
     }
}