load_module modules/ngx_http_brotli_filter_module.so;
load_module modules/ngx_http_brotli_static_module.so;
load_module modules/ngx_http_headers_more_filter_module.so;

user nginx;
worker_processes auto;
worker_rlimit_nofile 65535;

error_log /var/log/nginx/error.log notice;
pid /var/run/nginx.pid;

events {
    worker_connections 16384;
    multi_accept on;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    sendfile on;
    tcp_nopush on;
    server_tokens off;
    proxy_headers_hash_bucket_size 512;

    keepalive_timeout 65;

    # SSL Session Cache
    ssl_session_cache shared:SSL:60m;

    # Include Snippets
    # Include Snippets (Global HTTP context)
    # Excludes acme_challenge.conf which is server-context only
    include /etc/nginx/snippets/cache_zones.conf;
    include /etc/nginx/snippets/log_formats.conf;
    include /etc/nginx/snippets/rate_limit.conf;
    include /etc/nginx/snippets/security_maps.conf;
    # include /etc/nginx/snippets/custom_errors.conf; # Optional globally

    # Global Fallback Logs
    error_log /var/log/nginx/error.log warn;
    access_log /var/log/nginx/access.log;

    # Include Site Configurations
    include /etc/nginx/conf.d/*.conf;
}