diff options
Diffstat (limited to 'nginx.conf')
| -rw-r--r-- | nginx.conf | 39 |
1 files changed, 32 insertions, 7 deletions
@@ -17,6 +17,32 @@ server { # Don't leak nginx version on error pages / server header server_tokens off; + # Gzip compression + gzip on; + gzip_vary on; + gzip_min_length 1024; + gzip_proxied any; + gzip_types text/plain text/css text/xml application/json application/javascript application/xml+rss image/svg+xml; + + # Security headers + add_header X-Content-Type-Options "nosniff" always; + add_header X-Frame-Options "SAMEORIGIN" always; + add_header Referrer-Policy "strict-origin-when-cross-origin" always; + + # Static asset caching + location ~* \.(ico|css|js|gif|jpe?g|png|svg|woff2?)$ { + expires 30d; + add_header Cache-Control "public, no-transform"; + } + + # Compatibility for assets prefix + location = /assets/public_key { + try_files /public_key /assets/public_key =404; + } + location = /assets/dissertation.pdf { + try_files /dissertation.pdf /assets/dissertation.pdf =404; + } + # Serve PDFs directly location ~* \.pdf$ { add_header Content-Type application/pdf; @@ -24,13 +50,13 @@ server { try_files $uri =404; } - # /cv should point to the PDF + # /cv should point to the PDF or plaintext cv location = /cv { - try_files - /cv$final_suffix - /cv/index$final_suffix - /cv.pdf - =404; + try_files + /cv$final_suffix + /cv/index$final_suffix + /cv.pdf + =404; } # /dissertation serves summary page or PDF fallback @@ -43,7 +69,6 @@ server { =404; } - location / { try_files $uri$final_suffix |