client_max_body_size 0;

location ~ /\.((git|svn|ssh|hg|ht*)/.*|ht.+) {
    deny all;
}

error_page 400 /error-pages/HTTP400.html;
#error_page 401 /error-pages/HTTP401.html;
error_page 402 /error-pages/HTTP402.html;
error_page 403 /error-pages/HTTP403.html;
error_page 404 /error-pages/HTTP404.html;
error_page 500 /error-pages/HTTP500.html;
error_page 501 /error-pages/HTTP501.html;
error_page 502 /error-pages/HTTP502.html;
error_page 503 /error-pages/HTTP503.html;

proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;

location /error-pages {
  alias /etc/nginx/error-pages/;
  internal;
}

add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Feature-Policy "geolocation 'self'; midi 'self'; notifications 'self'; push 'self'; sync-xhr 'self'; microphone 'self'; camera 'self'; magnetometer 'self'; gyroscope 'self'; speaker 'self'; vibrate 'self'; fullscreen 'self'; payment 'none';";