server { add_header X-Frame-Options DENY always; add_header X-Content-Type-Options nosniff; add_header X-XSS-Protection "1; mode=block" always; add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"; listen 80; server_name localhost; location / { root /usr/share/nginx/html; index index.html; try_files $uri $uri/ /index.html =404; } error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } # location /health { # return 200; # } location ~ /\. { deny all; return 403; } }