# SSL 인증서가 /etc/nginx/ssl/ 에 있을 때 entrypoint 가 conf.d 에 복사한다.
server {
    listen       443 ssl;
    http2        on;
    server_name  _;
    root         /usr/share/nginx/html;
    index        index.html;

    ssl_certificate     /etc/nginx/ssl/fullchain.pem;
    ssl_certificate_key /etc/nginx/ssl/privkey.pem;
    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers off;
    ssl_session_cache   shared:SSL:10m;
    ssl_session_timeout 1d;

    client_max_body_size 32m;

    resolver 127.0.0.11 8.8.8.8 8.8.4.4 valid=30s;
    resolver_timeout 5s;

    include /etc/nginx/gc-locations.inc;
}