worker_processes auto;
pid /tmp/nginx.pid;

events {
    worker_connections 1024;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    server_tokens off;

    # Rate-Limiting für besseren DDoS-Schutz
    limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;

    # Logging-Einstellungen
    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for"';

    access_log /var/log/nginx/access.log main;
    error_log /var/log/nginx/error.log warn;

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;

    # TLS-Einstellungen
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;

    # Include server configs
    include /etc/nginx/conf.d/*.conf;
}