user zulip;

worker_processes auto;
pid /var/run/nginx.pid;

worker_rlimit_nofile 40000;
events {
    worker_connections 40000;

    use epoll;

    multi_accept on;
}

http {
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    client_max_body_size 25m;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    reset_timedout_connection on;

    gzip on;
    gzip_disable "msie6";
    gzip_proxied any;
    gzip_types
      audio/ogg
      application/javascript
      application/json
      application/octet-stream
      application/xml
      application/x-javascript
      image/png
      text/css
      test/javascript
      text/plain;
    gzip_vary on;

    # Select a Connection header for sockjs reverse-proxying
    map $http_upgrade $connection_upgrade {
        default upgrade;
        ''      close;
    }

    ssl_prefer_server_ciphers On;
    ssl_session_cache shared:SSL:10m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers  EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;


    include /etc/nginx/conf.d/*.conf;
    include /etc/nginx/sites-enabled/*;
}
