nginx-default.conf

upstream mapproxy {
    server 0.0.0.0:8080;
}
server {
    listen 80;

    # Setting a keep-alive timeout on the server side helps in mitigation of DOS attacks
    keepalive_timeout 10;

    # Setting the send_timeout directive on the server side helps mitigate slow HTTP denial of
    # service attacks
    send_timeout 10;

    # Hiding the version will slow down and deter some potential attackers since nginx version number is not visible
    # for them
    server_tokens off;

    location / {
        uwsgi_param SCRIPT_NAME $http_script_name;
        uwsgi_pass mapproxy;
        include uwsgi_params;
        proxy_set_header Host $http_host;

        # The server and x-powered-by header specify the version of the nginx => Do not show this information
        # of the server to potential attackers
        proxy_hide_header X-Powered-By;
        proxy_hide_header Server;

        # Cache
        #add_header Cache-Control $upstream_http_cache_control;
        #expires $upstream_http_expires;
    }
}