user nginx; worker_processes auto; load_module "/usr/lib/nginx/modules/ngx_http_xslt_filter_module.so"; error_log /var/log/nginx/error.log notice; pid /var/run/nginx.pid; events { worker_connections 1024; } http { include /etc/nginx/mime.types; default_type application/octet-stream; log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log main; sendfile on; #tcp_nopush on; keepalive_timeout 65; #gzip on; include /etc/nginx/conf.d/*.conf; # Disable sending the server identification server_tokens off; # Prevent displaying Botpress in an iframe (clickjacking protection) add_header X-Frame-Options SAMEORIGIN; # Prevent browsers from detecting the mimetype if not sent by the server. add_header X-Content-Type-Options nosniff; # Force enable the XSS filter for the website, in case it was disabled manually add_header X-XSS-Protection "1; mode=block"; # Configure the cache for static assets proxy_cache_path /srv/nginx_cache levels=1:2 keys_zone=my_cache:10m max_size=10g inactive=60m use_temp_path=off; # Set the max file size for uploads (make sure it is larger than the configured media size in botpress.config.json) client_max_body_size 15M; }