user nginx; worker_processes 1; ##load_module modules/ngx_http_brotli_static_module.so; # Required to load module if using the newer image error_log /var/log/nginx/error.log notice; pid /var/run/nginx.pid; events { worker_connections 1024; } http { include /etc/nginx/mime.types; default_type application/octet-stream; log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log main; sendfile on; keepalive_timeout 65; proxy_cache_path /var/cache/nginx keys_zone=owl_cache:20m inactive=24h; upstream backend { server owlboard-backend:8460; } server { listen 80; server_name localhost; proxy_cache owl_cache; add_header Content-Security-Policy "default-src 'self'"; location / { root /site-static/; index index.html; gzip_static on; brotli_static on; error_page 404 /404.html; add_header Cache-Control "public, no-transform, max-age=1209600"; } location /misc/ { proxy_pass http://backend; } location /api/ { proxy_pass http://backend; proxy_cache_key $scheme://$host$uri$is_args$query_string; proxy_ignore_headers Cache-Control; proxy_cache_valid 200 2m; # Evaluate whether 2m or 1m is more appropriate add_header Cache-Control "private, no-transform, max-age=120"; } location /api/v1/list/ { proxy_pass http://backend; proxy_cache_key $scheme://$host$uri$is_args$query_string; proxy_ignore_headers Cache-Control; proxy_cache_valid 200 10080m; add_header Cache-Control "public, no-transform, max-age=604800"; } } }