server {

listen 80;

server_name localhost;

root /usr/share/nginx/html;

index index.html;

gzip on;

gzip_vary on;

gzip_min_length 1024;

gzip_proxied expired no-cache no-store private auth;

gzip_types

text/plain

text/css

text/xml

text/javascript

application/javascript

application/xml+rss

application/json;

add_header X-Frame-Options "SAMEORIGIN" always;

add_header X-XSS-Protection "1; mode=block" always;

add_header X-Content-Type-Options "nosniff" always;

add_header Referrer-Policy "no-referrer-when-downgrade" always;

add_header Content-Security-Policy "default-src 'self' http: https: data: blob: 'unsafe-inline'" always;

location / {

try_files $uri $uri/ /index.html;

}

location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {

expires 1y;

add_header Cache-Control "public, immutable";

}

location ~* \.html$ {

expires 1h;

add_header Cache-Control "public";

}

location /health {

access_log off;

return 200 "healthy\n";

add_header Content-Type text/plain;

}