nginx.conf

user www-data;
worker_processes auto;
pid /run/nginx.pid;

events {
	worker_connections 1024;
	use epoll;
	multi_accept on;
}

http {
	##
	# Basic
	##

	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;
	client_max_body_size 8m;
	server_tokens off;
	default_type application/octet-stream;
	include mime.types;
	charset_types
		text/css
		text/plain
		text/vnd.wap.wml
		application/javascript
		application/json
		application/rss+xml
		application/xml;

        ##
        # SSL
        # mozilla.github.io/server-side-tls/ssl-config-generator/
        ##

	ssl_session_timeout 1d;
	ssl_session_cache shared:SSL:50m;
	ssl_session_tickets off;
	ssl_dhparam /etc/nginx/cert/dhparam.pem;
	ssl_protocols TLSv1.2;
	ssl_prefer_server_ciphers on;
	ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
	add_header Strict-Transport-Security max-age=15768000 always;
	#ssl_stapling on;
	#ssl_stapling_verify on;
	#resolver 8.8.8.8

	##
	# Log
	##

	log_format main
		'$remote_addr - $remote_user - $upstream_cache_status [$time_local] '
		'"$request" $status $body_bytes_sent "$http_referer" '
		'"$http_user_agent" "$http_x_forwarded_for"';
	access_log off;
        #access_log /var/log/nginx/access.log main;
        error_log /var/log/nginx/error.log warn;
	log_not_found off;

	##
	# gzip
	##

	gzip on;
	gzip_disable "msie6";
	gzip_vary on;
	gzip_proxied any;
	gzip_comp_level 5;
	gzip_min_length 256;
	gzip_types
		application/atom+xml
		application/javascript
		application/json
		application/ld+json
		application/manifest+json
		application/rss+xml
		application/vnd.geo+json
		application/vnd.ms-fontobject
		application/x-font-ttf
		application/x-web-app-manifest+json
		application/xhtml+xml
		application/xml
		font/opentype
		image/bmp
		image/svg+xml
		image/x-icon
		text/cache-manifest
		text/css
		text/plain
		text/vcard
		text/vnd.rim.location.xloc
		text/vtt
		text/x-component
		text/x-cross-domain-policy;

	##
	# NGINX FastCGI Cache
	##

	fastcgi_cache_path /mnt/ramdisk/nginx-cache levels=1:2 keys_zone=FASTCGICACHE:8m max_size=32m inactive=1y;
	fastcgi_cache_key "$scheme$request_method$host$request_uri";
	fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
	fastcgi_cache_use_stale updating error timeout invalid_header http_500;

	##
	# CloudFlare RealIp
	# (For sites behind CloudFlare's proxy)
	##

	#include /etc/nginx/global/cloudflare.conf;

	##
	# Virtual Host
	##

	include /etc/nginx/conf.d/*.conf;
	include /etc/nginx/sites-enabled/*;
}