Version 1.0.14

Added

• Explicitly set fastcgi_param HTTP_HOST to mitigate HTTP_HOST Security Issues
• Added =404 as the last parameter in each of the try_files directives to avoid internal loops
• Added ssi on; to the default config for server-side includes

Version 1.0.13

Added

• Disable limits on the maximum allowed size of the client request body via client_max_body_size
• Add expires headers for mp3 files
• Updated bot UserAgents list

Version 1.0.12

Added

• Added configuration for banning bots based on UserAgent

Version 1.0.11

Added

• Added a basic_localdev.com.conf for people who just want a basic Nginx configuration for Craft local dev

Version 1.0.10

Changed

• Updated the config to use php7.1 by default
• Added comments for the CME config

Version 1.0.9

Changed

• Added OCSP stapling
• Tweaked TLS settings for performance
• Optimized ssl_buffer_size for TTFB
• Updated README.md with instructions for downloading your Issuer certificate

Version 1.0.8

Changed

• Fixed an issue where the removal of trailing slashes could cause directory URLs to fail with "too many redirects"

Version 1.0.7

Added

• Added Referrer-Policy "no-referrer-when-downgrade"; to security.conf

Version 1.0.6

Added

• Added handling of missing .php files routed through Craft
• Added 404 handler
• Added .gitignore

Changed

• Removed html and other non-cacheable files from matching in expires.conf

Version 1.0.5

Added

• Added webp to the expires header support

Changed

• Remove etags from static resources
• Updated the CHANGELOG.md format