user              www-data;
worker_processes  auto;

error_log  /var/log/nginx/error.log crit;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include                   /etc/nginx/mime.types;
    default_type              application/octet-stream;
    access_log                off;
    sendfile                  on;
    server_tokens             off;
    tcp_nopush                on;
    tcp_nodelay               on;
    keepalive_timeout         65;
    client_max_body_size      100M;
    http2                     on;

    ssl_protocols             TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_dhparam               /etc/ssl/private/dhparam.pem;
    ssl_ciphers               ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;
    ssl_session_timeout       10m;
    ssl_session_cache         shared:SSL:10m;
    ssl_session_tickets       off;

    include /etc/nginx/conf.d/*.conf;
}