worker_processes 1;
daemon off;

events {

      worker_connections 1024;
}

http {

      # Basic Settings
      include /home/jarmahent/redacted/mime.types;
      default_type application/octet-stream;

      sendfile on;
      tcp_nopush on;
      tcp_nodelay on;
      keepalive_timeout 65;
      types_hash_max_size 2048;
      client_max_body_size 50m;
      server_tokens off;

      # PROXY SETTINGS

      proxy_set_header REAL_REMOTE_ADDR $remote_addr;
      proxy_set_header REAL_HTTP_HOST $http_host;
      proxy_set_header X_FORWARDED_FOR $proxy_add_x_forwarded_for;

      proxy_read_timeout 600;
      proxy_intercept_errors on;
      proxy_buffering off;

      ssl on;
      ssl_prefer_server_ciphers on;
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
      ssl_ciphers !aNULL:!eNULL:FIPS@STRENGTH:!3DES;
      ssl_session_cache shared:SSL:5m;
      ssl_session_timeout 60m;
      ssl_certificate /etc/letsencrypt/live/kevintweaks.com/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/kevintweaks.com/privkey.pem;

      # GZIP

      gzip on;
      gzip_disable "msie6";
      gzip_proxied any;
      gzip_comp_level 6;
      gzip_min_length 256;
      gzip_http_version 1.0;
      gzip_types text/plain
      text/css
      application/x-javascript
      application/json
      text/xml
      application/xml
      application/xml+rss
      text/javascript

      include /etc/nginx/sites-enabled/*;

      server {

            listen 443;
            server_name redacted.com;

            location / {

                  proxy_http_version 1.1;
                  root /home/jarmahent/redacted/html_root;
                  location ~* \.(.gif|ico|jpg|css|js)$ {

                        expires @24h
                  }

                  error_log /home/jarmahent/redacted/redacted-instance-error.log;
                  access_log /home/jarmahent/redacted/redacted-instance-access.log;

                  charset utf-8;
                  error_page 404 502;


                  proxy_pass http://127.0.0.1:9290;
            }
      }
}