nginx.conf

user www-data www-data;
error_log /var/log/nginx/error.log;
worker_rlimit_nofile 8192;
pid /var/run/nginx.pid;
worker_processes 4;

events {
  multi_accept on;
  worker_connections 2048;
  use epoll;
}

http {
  log_format docker '[$host]: $remote_addr - $remote_user [$time_local] '
    '"$request" $status $body_bytes_sent '
    '"$http_referer" "$http_user_agent"';
  access_log /var/log/nginx/access.log docker;
  default_type application/octet-stream;

  charset utf8;
  rewrite_log off;
  gzip_comp_level 9;
  include mime.types;
  keepalive_timeout 24;
  lingering_close on;
  lingering_time 24;
  gzip_vary on;
  gzip on;

  gzip_types text/xml;
  gzip_types text/javascript;
  gzip_types application/json;
  gzip_types application/x-javascript;
  gzip_types application/javascript;
  gzip_types application/x-font-ttf;
  gzip_types application/ttf;
  gzip_types image/x-icon;
  gzip_types text/plain;
  gzip_types text/css;
  gzip_types image/gif;
  gzip_types image/jpeg;
  gzip_types image/png;

  # SSL settings
  ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_prefer_server_ciphers on;
  ssl_session_cache shared:SSL:10m;
  ssl_session_timeout 5m;
  ssl_dhparam /etc/ssl/dhparams.pem;

  include /etc/nginx/conf.d/*.conf;
  include /etc/nginx/site.d/*.conf;
}