Update proxy.conf.template

Author: damalis

proxy/templates/proxy.conf.template

@@ -1,15 +1,12 @@
 upstream docker_webserver {
-	server webserver:8080;
+	server	webserver:8080;
 }
 
 map $scheme $proxy_x_forwarded_ssl {
 	default off;
 	https on;
 }
 
-server_tokens off;
-proxy_hide_header X-Powered-By;
-
 server {
 	listen ${NGINX_PORT} default_server;
 	listen [::]:${NGINX_PORT} ipv6only=on default_server;
@@ -38,19 +35,7 @@ server {
 	#ssl_dhparam /etc/letsencrypt/ssl-dhparam.pem;
 	include /etc/letsencrypt/options-ssl-nginx.conf;
 	#
-	client_max_body_size 8m;
-	proxy_headers_hash_max_size 768;
-	proxy_headers_hash_bucket_size 128;
-	#
-    # global gzip on
-  	gzip on;
-  	gzip_min_length 10240;
-  	gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml image/svg+xml;
-  	gzip_disable "MSIE [1-6]\.";
 
-  	add_header Cache-Control public;
-	add_header X-Cache-Status $upstream_cache_status;
-  
 	location / {		
 		proxy_pass	http://docker_webserver;		
 		proxy_set_header	X-Real-IP	$remote_addr;
@@ -59,8 +44,8 @@ server {
 		proxy_set_header	Host	$host;
 		proxy_set_header	X-Forwarded-Host	$host;
 		proxy_set_header	X-Forwarded-Port	$server_port;	
-		proxy_set_header Upgrade	$http_upgrade;
-		proxy_set_header Connection	"Upgrade";		
+		proxy_set_header	Upgrade	$http_upgrade;
+		proxy_set_header	Connection	"Upgrade";		
 		proxy_set_header	X-Forwarded-Ssl	$proxy_x_forwarded_ssl;		
 		#
 		proxy_redirect	off;
@@ -73,26 +58,28 @@ server {
 		proxy_request_buffering off;
 		#
 		# Mitigate httpoxy attack
-		proxy_set_header Proxy "";        
+		proxy_set_header Proxy "";
 	}
 	#
 	# deny access to .htaccess vb. files, if Apache's document root
-    #
-	location ~*  \.(svg|svgz)$ {
-        types {}
-        default_type image/svg+xml;
-    }
-    location = /favicon.ico {
-        log_not_found off;        
-    }
-    location = /robots.txt {
-        allow all;
-        log_not_found off;        
-    }
-    location ~/\. {
-        deny all;     
-        log_not_found off;
-    }    
+	#
+	location ~/\. {
+		deny all;     
+		log_not_found off;
+	}
+	#
+	location ~ /.well-known {
+		allow all;
+	}
+	#
+	location = /favicon.ico {
+		log_not_found off;        
+	}
+	#
+	location = /robots.txt {
+		allow all;
+		log_not_found off;        
+	}        
 	#
 	access_log off;
 	error_log  /var/log/nginx/${NGINX_HOST}.error.log error;