user www-data;
worker_processes auto;
pid /run/nginx.pid;

events {
	worker_connections 768;
}

http {

	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;
        proxy_headers_hash_max_size 1024;
        proxy_headers_hash_bucket_size 128;
        server_tokens off;

	include /etc/nginx/mime.types;
	default_type application/octet-stream;

	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
	ssl_prefer_server_ciphers on;

	access_log /var/log/nginx/proxy.log;
	error_log /var/log/nginx/error.log;

	gzip on;
	gzip_disable "msie6";

        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
               '$ssl_protocol '
               '$status $body_bytes_sent "$http_referer" '
               '"$http_user_agent" $request_time "$http_x_forwarded_for"';

	include /etc/nginx/conf.d/*.conf;
	include /etc/nginx/sites-enabled/*;
}