#
# !!! This file is managed by Ansible !!!
#

user {{ services.nginx.user | default('http') }};

worker_processes auto;

pcre_jit on;

error_log /var/log/nginx/error.log warn;

{% if services.nginx.enableXSLTFilter is true %}
load_module "/usr/lib/nginx/modules/ngx_http_xslt_filter_module.so";
{% endif %}

events {
	worker_connections 1024;
}

http {
	include /etc/nginx/mime.types;
	default_type application/octet-stream;

	server_tokens off;

	server_names_hash_bucket_size 64;

	types_hash_max_size 1024;
	types_hash_bucket_size 128;

	client_max_body_size 1G;

	keepalive_timeout 65;

	sendfile on;

	tcp_nodelay on;

	ssl_prefer_server_ciphers on;

	ssl_session_cache shared:SSL:2m;

	gzip on;

	gzip_vary on;

	#gzip_static on;


	# Specifies the main log format.
	log_format main '$remote_addr - $remote_user [$time_local] "$request" '
			'$status $body_bytes_sent "$http_referer" '
			'"$http_user_agent" "$http_x_forwarded_for"';

	{% if services.nginx.extraConfig is defined %}
	{{ services.nginx.extraConfig }}
	{% endif %}

	access_log /var/log/nginx/access.log main;

	include /etc/nginx/conf.d/*.conf;
	include /etc/nginx/vhosts/*.conf;
}