user nginx;
worker_processes auto;

error_log /dev/stderr;
pid /dev/null;

events {
	worker_connections 4096;
}

http {
	log_format journald '$remote_addr [$server_name:$server_port] $status "$request" $body_bytes_sent "$http_referer" "$http_user_agent"';
	access_log /dev/stdout journald;

	ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 ECDHE-RSA-AES256-SHA384 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH !EDH+aRSA !RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";
	ssl_protocols TLSv1.1 TLSv1.2;
	ssl_prefer_server_ciphers on;
	ssl_session_cache shared:SSL:32m;
	ssl_session_tickets on;
	ssl_session_timeout 1h;

	types {
		text/html html;
		application/javascript js;
	}

	include /etc/nginx/sites/*;
}