infra_public/roles/stable/nginx/templates/static_service.conf.j2

server {
  listen 80;
  listen [::]:80;
  listen 443 ssl http2;
  server_name {{item.server_name}};

  keepalive_timeout 200;
  {{item.custom_config | default('') | indent(2)}}

  {% if with_ssl %}

  ssl_session_timeout 5m;
  ssl_session_cache shared:SSL:50m;
  ssl_session_tickets off;
  ssl_certificate /etc/nginx/certs/ada/ada.crt;
  ssl_certificate_key /etc/nginx/certs/ada/ada.key;
  {% endif %}

  root {{ item.server_root }};

  location / {

    # compression
    gzip on;
    gzip_types      text/plain application/xml application/json;
    gzip_proxied    no-cache no-store private expired auth;
    gzip_min_length 1000;

    # cache
    proxy_cache STATIC;
  }
}