user              www-data;
worker_processes  auto;

error_log  /var/log/nginx/error.log crit;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include              /etc/nginx/mime.types;
    default_type         application/octet-stream;
    access_log           off;
    sendfile             on;
    server_tokens        off;
    tcp_nopush           on;
    tcp_nodelay          on;
    keepalive_timeout    65;
    client_max_body_size 100M;

    ssl_protocols             TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_dhparam               /etc/ssl/private/dhparam.pem;
    ssl_ciphers               ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
    ssl_ecdh_curve            secp384r1;
    ssl_session_timeout       10m;
    ssl_session_cache         shared:SSL:10m;
    ssl_session_tickets       off;

    include /etc/nginx/conf.d/*.conf;
}