Nginx configuration

nginx.conf

user  nginx;
worker_processes  4;
worker_rlimit_nofile 65535;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

events {
    worker_connections  4096;
    multi_accept        on;
    use                 epoll;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    access_log  off;

    sendfile       on;
    tcp_nopush     on;
    tcp_nodelay    on;

    keepalive_timeout  65;

    gzip  on;
    gzip_types  text/plain text/css application/javascript image/svg+xml;
    gzip_vary  on;
    gzip_proxied  any;

    open_file_cache          max=1000 inactive=1y;
    open_file_cache_valid    30s;
    open_file_cache_min_uses 1;

    include /etc/nginx/servers/*.conf;
}

server.conf

server {
    listen       443 ssl http2;
    server_name  alfredxing.com xng.io i.sea.xng.io;

    ssl_certificate fullchain.cer;
    ssl_certificate_key key.key;

    ssl_protocols               TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers                 EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
    ssl_prefer_server_ciphers   on;

    ssl_stapling on;
    ssl_stapling_verify on;
    ssl_trusted_certificate ca.cer;
    resolver 8.8.4.4 8.8.8.8;

    ssl_buffer_size 4k;

    charset utf-8;

    root /www/;

    location / {
        index  index.html;
        expires  1M;
        add_header Cache-Control "public";
    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}