nginx/nginx.conf

user nginx;
worker_processes auto;
pcre_jit on;
load_module /usr/lib/nginx/modules/ngx_stream_module.so;
events {
	worker_connections 768;
}
http {
	server_tokens off;
	sendfile on;
	tcp_nopush on;
	types_hash_max_size 2048;

	# mime types
	include mime.types;
	default_type application/octet-stream;

	# logging
	access_log /var/log/nginx/access.log main;
	error_log /var/log/nginx/error.log warn;

	# gzip
	gzip on;
	gzip_vary on;
	gzip_proxied any;
	gzip_comp_level 6;
	gzip_buffers 16 8k;
	gzip_http_version 1.1;
	gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

	# ssl parameters
	include ssl-params.conf;

	# proxy parameters
	include proxy-params.conf;

	# enable http2
	http2 on;

	# include http
	include http/*.conf;
}
stream {
	# logging
	log_format basic '$remote_addr:$remote_port - $time_local '
					 '$protocol stat:$status bs:$bytes_sent br:$bytes_received '
					 st:'$session_time';
	access_log access.log basic;
	error_log error.log;

	# include stream
	include stream/*.conf;
}