notes/nginx.conf

user  nginx;
worker_processes  auto;

error_log  stderr;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;

    access_log /dev/stdout;

    server_tokens off;

    sendfile on;

    keepalive_timeout  65;

    gzip on;
    gzip_static on;

    gzip_types *;

    server {
        listen       80;
        server_name  localhost;
        root   /usr/share/nginx/html;
        index  index.html;

        set_real_ip_from  0.0.0.0/0;
        real_ip_header X-Forwarded-For;

        add_header X-Frame-Options "SAMEORIGIN";
        add_header X-XSS-Protection "1; mode=block";
        add_header X-Content-Type-Options "nosniff";
        add_header Referrer-Policy "same-origin";
        add_header Strict-Transport-Security "max-age=5184000";

        location /ping {
            return 200 "PONG";
        }

        location ~* \.(png|jpg|gif|svg|txt|css|js|xml|eot|ttf|woff2|woff)$ {
            add_header Cache-Control "public, max-age=0, must-revalidate";
        }

        error_page 404 /404.html;
        error_page 500 502 503 504 /50x.html;
    }
}