nginx.conf

user www-data;
worker_processes auto;
pid /run/nginx.pid;
daemon off;

env S3_BUCKET;
env AWS_ACCESS_KEY;
env AWS_SECRET_KEY;

events {
       	worker_connections 768;
}

http {
       	sendfile on;
       	tcp_nopush on;
       	tcp_nodelay on;
       	keepalive_timeout 65;
       	types_hash_max_size 2048;
        server_names_hash_bucket_size 64;

       	include /etc/nginx/mime.types;
       	default_type application/octet-stream;

       	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
       	ssl_prefer_server_ciphers on;

        access_log /dev/stdout;
        error_log /dev/stderr error;

        gzip on;
        gzip_disable "msie6";
        gzip_http_version 1.1;
        gzip_types
            text/css
            text/javascript
            text/xml
            text/plain
            application/javascript
            application/x-javascript
            application/json;

        proxy_cache_lock on;
        proxy_cache_lock_timeout 5s;
        proxy_cache_path /etc/nginx/cache levels=1:2 keys_zone=s3cache:10m max_size=30g;

       	include /etc/nginx/conf.d/*.conf;
       	include /etc/nginx/sites-enabled/*;
}