invidious/nginx/nginx.conf

user www-data;
worker_processes 8;
worker_rlimit_nofile 25000;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
	worker_connections 4096;
	# multi_accept on;
}

http {

	##
	# Basic Settings
	##

	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;
	server_tokens off;
	ssl_session_cache    shared:nginx_TLS_default:4m;
	client_max_body_size 2M;

	include /etc/nginx/mime.types;
	default_type application/octet-stream;


	##
	# SSL Settings
	##

	include snippets/tls12.conf;
	include snippets/ocsp.conf;
	ssl_dhparam /srv/letsencrypt/dhparam.pem;

	##
	# Logging Settings
	##

	access_log off;
	error_log /dev/null emerg;

	
	##
	# Maintenance mode
	##

	include snippets/invidious_access.conf;

	##
	# Gzip Settings
	##

	gzip on;
	gzip_vary on;
	gzip_min_length 10240;
	gzip_proxied expired no-cache no-store private auth;
	gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml;
	
	limit_req_status 429;
	limit_conn_status 429;

	##
	# Virtual Host Configs
	##

	include /etc/nginx/sites-enabled/*.vhost;
}