nginx.conf

worker_processes auto;

events {
    worker_connections 2048;
}

http {
    server_tokens off;
    include mime.types;
    default_type text/plain;

    server {
        listen 80;
        server_name _;

        root /usr/share/nginx/html;
        autoindex on;

        add_header X-Content-Type-Options "nosniff" always;
        add_header X-XSS-Protection "1; mode=block" always;
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
        add_header X-Frame-Options "DENY" always;
        add_header Referrer-Policy "no-referrer" always;
        add_header Content-Security-Policy "default-src 'self';" always;

        location / {
            try_files $uri $uri/ =404;
        }

        location ~* \.json$ {
            default_type application/json;
            try_files $uri =404;
        }
    }
}