pid /tmp/nginx.pid;

http {
  resolver 172.16.0.1;
  types_hash_max_size 4096;
  ssl_certificate /etc/certificates/fullchain.pem;
  ssl_certificate_key /etc/certificates/privkey.pem;
  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_prefer_server_ciphers on;
  charset utf-8;
  http2 on;
  gzip on;
  include mime.types;
  sendfile on;
  tcp_nodelay on;
  tcp_nopush on;
  ssl_stapling on;
  ssl_stapling_verify on;
  client_max_body_size 100M;
  proxy_read_timeout 600;
  proxy_send_timeout 600;
  include sites/*;
  server {
    listen 80;
    listen [::]:80;
    return 301 https://$host$request_uri;
  }
  server {
    listen 443 ssl default_server;
    listen [::]:443 ssl default_server;
    location / {
      return 404;
    }
  }
}
events {
  worker_connections 1024;
}