# For more information on configuration
# See: http://nginx.org/en/docs/

# Configure core
# See: https://nginx.org/en/docs/ngx_core_module.html
user             nginx;
worker_processes auto;
error_log        /var/log/nginx/error.log;
pid              /run/nginx.pid;

# Load dynamic modules
# See: /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    # Configure logs
    # See: https://nginx.org/en/docs/http/ngx_http_log_module.html
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;

    # Configure core
    # See: https://nginx.org/en/docs/ngx_core_module.html
    include             /etc/nginx/mime.types;
    default_type        text/html;
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 4096;

    # Configure ssl module
    # See: https://nginx.org/en/docs/http/ngx_http_ssl_module.html 
    include                   /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_certificate           /etc/letsencrypt/live/netoik.io/fullchain.pem;
    ssl_certificate_key       /etc/letsencrypt/live/netoik.io/privkey.pem;
    ssl_dhparam               /etc/letsencrypt/ssl-dhparams.pem;
    ssl_session_cache         shared:SSL:1m;
    ssl_prefer_server_ciphers on;

    # Configure headers
    # See: https://nginx.org/en/docs/http/ngx_http_headers_module.html
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload;" always;

    # Configure http2
    # See: https://nginx.org/en/docs/http/ngx_http_v2_module.html
    http2 on;

    # Configure http3
    # See: https://nginx.org/en/docs/http/ngx_http_v3_module.html
    http3 on;

    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See: http://nginx.org/en/docs/ngx_core_module.html#include
    include /etc/nginx/conf.d/*.conf;
}