worker_processes 2;
load_module /usr/lib/nginx/modules/ngx_cp_attachment_module.so;

events {
  worker_connections 1024;
}

http {
  include       mime.types;
  default_type  application/octet-stream;
  server_tokens off;

  log_format vhost 'openappsec-waf "$host" "$proxy_protocol_addr" "$request" "$http_user_agent" "$status"';

  sendfile  on;
  keepalive_timeout 65;
  fastcgi_param HTTP_PROXY "";

  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;

  resolver 1.1.1.1 8.8.8.8;
  resolver_timeout 2s;

  proxy_cache_valid 200 1d;

  include /etc/nginx/conf.d/*.conf;
}