nginx.conf

events {
	worker_connections 4096;
}

http {
	# Set the index
	index index.html;
	include mime.types;
	default_type application/octet-stream;

	# Make sure client side routing still works
	proxy_intercept_errors on;
	error_page 404 = /index.html;

	# Optimize request data
	client_max_body_size 2m;
	client_body_buffer_size 128k;

	# Set open file cache
	open_file_cache max=10000 inactive=5m;
	open_file_cache_valid 10m;
	open_file_cache_min_uses 1;
	open_file_cache_errors on;

	# Enable GZip of files GZipped during build.
	gzip_static on;

	# Enable on-the-fly GZip for files not GZipped on build time.
	gzip on;
	gzip_buffers 64 8k;
	gzip_comp_level 9;
	gzip_disable "msie6";
	gzip_http_version 1.1;
	gzip_types text/plain application/javascript application/json;

	# Add a few security headers
	add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload" always;
	add_header Content-Security-Policy "default-src 'self'" always;
	add_header X-Content-Type-Options "nosniff" always;
	add_header X-XSS-Protection "1; mode=block" always;
	add_header X-Frame-Options DENY always;

	server {
		# Create the server
		listen 80;
		root /usr/share/nginx/html;

		# Add cache expiration
		expires 3h;
		add_header Cache-Control "public";
	}
}