user root;
worker_processes auto;

error_log /var/log/nginx/error.log notice;
pid /var/run/nginx.pid;

thread_pool default threads=512 max_queue=65536;

events {
    worker_connections 4096;
    multi_accept on;
    use epoll;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    server_names_hash_bucket_size 128;

    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
    '$status $body_bytes_sent "$http_referer" '
    '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log /var/log/nginx/access.log main;
    access_log off;

    sendfile on;
    tcp_nodelay on;

    keepalive_timeout 65;

    resolver [adresse ip] ipv6=off valid=10s;

    server_tokens off;
    tcp_nopush on;
    types_hash_max_size 2048;
    client_body_buffer_size 64K;
    client_header_buffer_size 64k;
    client_max_body_size 128k;
    large_client_header_buffers 8 16k;
    keepalive_requests 100000;
    send_timeout 30;
    client_body_timeout 30;
    client_header_timeout 30;
    reset_timedout_connection on;
    open_file_cache max=2000 inactive=20s;
    open_file_cache_valid 60s;
    open_file_cache_min_uses 5;
    open_file_cache_errors off;
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-Content-Type-Options nosniff;
    add_header Strict-Transport-Security "max-age=63072000" always;
    gzip on;
    gzip_static on;
    gzip_min_length 1024;
    gzip_comp_level 6;
    gzip_http_version 1.1;
    gzip_vary on;
    gzip_disable msie6;
    gzip_disable "MSIE [1-6]\.";
    gzip_proxied any;
    gzip_buffers 16 8k;
    gzip_types
        text/plain
        text/css
        text/xml
        text/javascript
        text/x-component
        application/x-javascript
        application/xml
        application/javascript
        application/json
        application/xml+rss
        application/rss+xml
        application/atom+xml
        font/truetype
        font/opentype
        application/vnd.ms-fontobject
        image/svg+xml
        application/geo+json
        application/ld+json
        application/manifest+json
        application/rdf+xml
        application/wasm
        application/x-web-app-manifest+json
        application/xhtml+xml
        font/eot
        font/otf
        font/ttf
        image/bmp
        text/cache-manifest
        text/calendar
        text/markdown
        text/vcard
        text/vnd.rim.location.xloc
        text/vtt
        text/x-cross-domain-policy
        application/x-font-ttf
        image/x-icon;

    include /etc/nginx/conf.d/*.conf;
}