user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
        use epoll;
        worker_connections 768;
        multi_accept off;
}

http {

        ##
        # Basic Settings
        ##

        sendfile on;
        tcp_nopush on;
        tcp_nodelay on;
        sendfile_max_chunk 4m;
        types_hash_max_size 2048;
        server_tokens off;
        keepalive_timeout 120s;
        proxy_buffering on;
        proxy_request_buffering off;
        proxy_store off;
        proxy_cache off;
        proxy_max_temp_file_size 0;
        proxy_buffers 64 4k;
        proxy_buffer_size 16k;
        proxy_busy_buffers_size 24k;
        fastcgi_buffering on;
        fastcgi_request_buffering off;
        fastcgi_buffers 64 4K;
        fastcgi_busy_buffers_size 24k;
        fastcgi_buffer_size 16k;
        fastcgi_max_temp_file_size 0;        
        client_header_buffer_size 4k;
        large_client_header_buffers 8 8k;

        # server_names_hash_bucket_size 64;
        # server_name_in_redirect off;

        include /etc/nginx/mime.types;
        default_type application/octet-stream;

        ##
        # SSL Settings
        ##

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
        ssl_prefer_server_ciphers on;

        ##
        # Logging Settings
        ##

        access_log off;
        error_log /var/log/nginx/error.log;

        gzip on;
        gzip_vary on;
        gzip_comp_level 3;
        gzip_min_length 256;
        gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
        gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/wasm application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

        ##
        # Virtual Host Configs
        ##

        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
}