nginx.conf

user                                    nginx;
worker_processes                        1;
error_log                               /proc/self/fd/2;
pid                                     /var/run/nginx.pid;

events {
    worker_connections                  1024;
    multi_accept                        on;
}

http {
    include                             /etc/nginx/mime.types;
    default_type                        application/octet-stream;
    fastcgi_buffers                     256 4k;
    fastcgi_intercept_errors            on;
    fastcgi_read_timeout                900;
    include                             fastcgi_params;
    access_log                          /proc/self/fd/2;
    port_in_redirect                    off;
    send_timeout                        600;
    sendfile                            on;
    client_body_timeout                 600;
    client_header_timeout               600;
    client_max_body_size                256M;
    keepalive_timeout                   60;
    keepalive_requests                  100;
    reset_timedout_connection           off;
    tcp_nodelay                         on;
    tcp_nopush                          on;
    server_tokens                       off;
    upload_progress uploads             1m;

    gzip                                on;
    gzip_buffers                        16 8k;
    gzip_comp_level                     2;
    gzip_http_version                   1.1;
    gzip_min_length                     10240;
    gzip_types                          text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript image/x-icon application/vnd.ms-fontobject font/opentype application/x-font-ttf;
    gzip_vary                           on;
    gzip_proxied                        any;
    gzip_disable                        msie6;

    add_header                          X-XSS-Protection '1; mode=block';
    add_header                          X-Frame-Options SAMEORIGIN;
    add_header                          X-Content-Type-Options nosniff;

    map $http_x_forwarded_proto $fastcgi_https {
        default $https;
        http '';
        https on;
    }

    map $uri $no_slash_uri {
        ~^/(?<no_slash>.*)$ $no_slash;
    }

    upstream upstream {
        server php:9000;
    }

    include /etc/nginx/conf.d/*.conf;
}