infra/roles/stable/nginx/templates/default.j2

	# cache
	proxy_cache_path /tmp levels=1:2 keys_zone=STATIC:10m	inactive=24h  max_size=10g use_temp_path=off;

	# redirect all http traffic to https
	server {
		listen 80 default_server;
		listen [::]:80 default_server;
		server_name _;
		return 301 https://$host$request_uri;
	}

	# enable proxy websocket
	map $http_upgrade $connection_upgrade {
		default upgrade;
		''      close;
	}