#load_module /usr/lib/nginx/modules/ngx_stream_module.so;

user www-data;
#pid /run/nginx.pid;
worker_processes 4;

events {
  worker_connections  2048;
}

http {
  proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=my_cache:50m inactive=60m;
  
  include       mime.types;
  default_type  application/octet-stream;
  #charset       utf-8;

  sendfile            on;
  tcp_nopush          on;
  tcp_nodelay         on;
  keepalive_timeout   15;
  types_hash_max_size 4096;
  
  client_body_buffer_size 10K;
  client_header_buffer_size 1k;
  client_max_body_size 8m;
  large_client_header_buffers 4 4k;

  fastcgi_connect_timeout 600;
  fastcgi_send_timeout    600;
  fastcgi_read_timeout    600;

  server_tokens off;
  #gzip  on;
  
  brotli on;
  brotli_types application/atom+xml application/javascript application/json application/rss+xml application/vnd.ms-fontobject application/x-font-opentype application/x-font-truetype application/x-font-ttf application/x-javascript application/xhtml+xml application/xml font/eot font/opentype font/otf font/truetype image/svg+xml image/vnd.microsoft.icon image/x-icon image/x-win-bitmap text/css text/javascript text/plain text/xml;
  gzip on;
  gzip_comp_level 6;
  gzip_types application/atom+xml application/javascript application/json application/rss+xml application/vnd.ms-fontobject application/x-font-opentype application/x-font-truetype application/x-font-ttf application/x-javascript application/xhtml+xml application/xml font/eot font/opentype font/otf font/truetype image/svg+xml image/vnd.microsoft.icon image/x-icon image/x-win-bitmap text/css text/javascript text/plain text/xml;
  http3 on;
  quic_gso on;
  quic_retry on;
  
  proxy_hide_header "server";
  proxy_hide_header "x-powered-by";
  
  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
  add_header X-Frame-Options "SAMEORIGIN" always;
  add_header X-Content-Type-Options "nosniff" always;
  add_header Content-Security-Policy "default-src 'self';";
  add_header Referrer-Policy "origin";
    
  access_log /var/log/nginx/access.log;
  
  include /etc/nginx/conf.d/*;
}

#include /etc/nginx/tcp-udp/*;