user {{ global_nginx_system_user }} {{ global_nginx_system_user }}; worker_processes auto; pid /run/nginx.pid; include {{ global_nginx_installation_directory }}/modules-enabled/*.conf; error_log {{ nginx_global_error_log }}; events { worker_connections 768; # multi_accept on; } http { ## # Basic Settings ## sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; types_hash_max_size 2048; server_tokens off; # Hide Server Tokens like Version for Security # server_names_hash_bucket_size 64; # server_name_in_redirect off; include {{ global_nginx_installation_directory }}/mime.types; default_type application/octet-stream; ## # SSL Settings ## include {{ nginx_snippets_directory }}/ssl; ## # Logging Settings ## access_log {{ nginx_global_access_log }}; error_log {{ nginx_global_error_log }}; ## # Gzip Settings ## gzip on; gzip_disable "msie6"; # gzip_vary on; # gzip_proxied any; # gzip_comp_level 6; # gzip_buffers 16 8k; # gzip_http_version 1.1; gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; map $http_upgrade $connection_upgrade { default upgrade; '' close; } ## # HTTP to HTTPs redirect ## server { listen 80 default_server; listen [::]:80 default_server; include {{ nginx_snippets_directory }}/acme; access_log off; location / { return 301 https://$host$request_uri; } } ## # Virtual Host Configs ## include {{ global_nginx_installation_directory }}/conf.d/*.conf; include {{ nginx_sites_directory }}/*; include {{ nginx_upstreams_directory }}/*; } stream { ## # Logging Settings ## include {{ nginx_streams_directory }}/*; }