worker_processes auto;
pid ./nginx.pid;
error_log .//* @echo testPath *//log/nginx-error.log;

events {
  worker_connections 1024;
}

http {
  sendfile on;
  tcp_nopush on;
  types_hash_max_size 2048;
  include /etc/nginx/mime.types;
  default_type application/octet-stream;

  ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
  ssl_prefer_server_ciphers on;
  ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;

  access_log .//* @echo testPath *//log/nginx-access.log;
  error_log .//* @echo testPath *//log/nginx-error.log;

  server {
    /* @echo reporterHostCommentOutIPv6Bind */listen /* @echo reporterHostBindIPv6 */:/* @echo reporterPort */ ssl http2 ipv6only=on; 
    listen /* @echo reporterHostBindIPv4 */:/* @echo reporterPort */ ssl http2;

    ssl_certificate .//* @echo keysPath *///* @echo CAPath *///* @echo reporterHost */.crt;
    ssl_certificate_key .//* @echo keysPath *///* @echo CAPath *///* @echo reporterHost */.key;

    charset UTF-8;

    root .;

    #index index.html;

    server_name _;

    #add_header Service-Worker-Allowed /;
    add_header Access-Control-Allow-Origin *;
    #add_header Cache-Control max-age=86400;

    location //* @echo testPath */ {
      try_files $uri =404;
    }

    location /node_modules {
      try_files $uri =404;
    }

    location / {
      deny all;
      return 403;
    }

  }
}