load_module /usr/lib/angie/modules/ngx_http_headers_more_filter_module.so;
load_module /usr/lib/angie/modules/ngx_http_brotli_filter_module.so;
load_module /usr/lib/angie/modules/ngx_http_brotli_static_module.so;
load_module /usr/lib/angie/modules/ngx_http_zstd_filter_module.so;
load_module /usr/lib/angie/modules/ngx_http_zstd_static_module.so;

user                 www-data;
pid                  /run/angie.pid;
worker_processes     auto;
worker_rlimit_nofile 65535;

events {
    multi_accept       on;
    worker_connections 65535;
}

http {

    log_format  main  '$remote_addr $remote_port - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" "$http_cookie" "$sent_http_set_cookie" "$http_host" "$http3"';


    #charset                 utf-8;
    sendfile                   on;
    tcp_nopush                 on;
    tcp_nodelay                on;
    server_tokens             off;
    log_not_found             off;
    types_hash_max_size      2048;
    client_max_body_size      512M;
    client_body_buffer_size   512M;
    etag off;

    # MIME
    include              mime.types;
    default_type         application/octet-stream;

    # Logging
    access_log           /var/log/angie/access.log;
    error_log            /var/log/angie/error.log warn;

    # SSL
    ssl_session_timeout  1d;
    ssl_session_cache    shared:SSL:10m;
    ssl_session_tickets  off;

    # Mozilla Modern configuration
    ssl_protocols        TLSv1.3 TLSv1.2;

    # OCSP Stapling
    ssl_stapling         on;
    ssl_stapling_verify  on;
    resolver             1.1.1.1 1.0.0.1 8.8.8.8 8.8.4.4 valid=60s;
    resolver_timeout     2s;

    brotli off;
    brotli_comp_level 6;
    brotli_static on;
    brotli_types *;

    zstd on;
    zstd_min_length 256; # no less than 256 bytes
    zstd_comp_level 3; # set the level to 3

    # Load configs
    include              /etc/angie/conf.d/*.conf;
    include              /etc/angie/sites-enabled/*;
    more_clear_headers   "Server";

            set_real_ip_from  127.0.0.1;  # Zaufane IP (np. Varnish lub inny proxy)
            real_ip_header    X-Forwarded-For;  # Użyj nagłówka X-Forwarded-For do określenia prawdziwego IP
            real_ip_recursive on;  # Uwzględnij wszystkie adresy IP w X-Forwarded-For

}