# headers add_header X-Frame-Options "SAMEORIGIN" always; add_header X-XSS-Protection "1; mode=block" always; add_header X-Content-Type-Options "nosniff" always; add_header X-UA-Compatible "IE=Edge" always; # . files location ~ /\. { deny all; } # assets location ~* \.(?:{{ extensions.assets }})$ { expires {{ data.expires_assets }}; access_log off; } # {{ data.expires_assets && data.expires_assets === data.expires_media ? 'assets, ' : '' }}media location ~* \.(?:{{ data.expires_assets && data.expires_assets === data.expires_media ? extensions.assets + '|' : '' }}{{ extensions.images }}|{{ extensions.audio }}|{{ extensions.video }})$ { expires {{ data.expires_media }}; access_log off; } # svg location ~* \.{{ extensions.svg }}$ { add_header Access-Control-Allow-Origin "*"; expires {{ data.expires_svg }}; access_log off; } # {{ data.expires_svg && data.expires_svg === data.expires_fonts ? 'svg, ' : '' }}fonts location ~* \.(?:{{ data.expires_svg && data.expires_svg === data.expires_fonts ? extensions.svg + '|' : '' }}{{ extensions.fonts }})$ { add_header Access-Control-Allow-Origin "*"; expires {{ data.expires_fonts }}; access_log off; } # gzip gzip on; gzip_vary on; gzip_proxied any; gzip_comp_level 6; gzip_types {{ gzipTypes }};