upstream dbf { server 127.0.0.1:8092; } server { listen [::]:443; listen 0.0.0.0:443; server_name FIXME; access_log /var/log/nginx/FIXME.log anonip; add_header Strict-Transport-Security "max-age=31536000" always; location /static { expires 1y; root /srv/www/dbf/public; } location / { proxy_cache dbf_cache; proxy_cache_lock on; proxy_ignore_headers "Set-Cookie"; proxy_hide_header "Set-Cookie"; proxy_pass http://dbf; proxy_http_version 1.1; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto "http"; add_header X-Frame-Options ""; add_header Strict-Transport-Security "max-age=31536000" always; } }