Sync config with...

Sync config with https://gitlab.inf.unibz.it/commul/docker/commons/blob/master/helm-charts/webserver/nginx.conf

dockerfiles/commul-customization/nginx.conf

@@ -19,37 +19,51 @@ http {
     include       mime.types;
     default_type  application/octet-stream;
 
-    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
-    #                  '$status $body_bytes_sent "$http_referer" '
-    #                  '"$http_user_agent" "$http_x_forwarded_for"';
+    set_real_ip_from  10.12.0.0/16;
+    real_ip_header    X-Forwarded-For;
 
-    #access_log  logs/access.log  main;
+    # equiv to the predefined "combined" format:
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent"';
 
-    sendfile        on;
-    #tcp_nopush     on;
+    access_log  logs/access.log  main;
+
+    sendfile           on;
+    #tcp_nopush        on;
 
     #keepalive_timeout  0;
     keepalive_timeout  65;
 
-    gzip  on;
-    gzip_disable "msie6";
-
-    gzip_comp_level 6;
-    gzip_min_length 1100;
-    gzip_buffers 16 8k;
-    gzip_proxied any;
+    # We try to compress on the far-back end and hope it will pass the ingress unharmed
+    # (and is still helpful)
+    gzip               on;
+    gzip_comp_level     5;
+    gzip_http_version 1.1;
+    gzip_min_length  1024;
+    gzip_proxied      any;
+    gzip_vary          on;
+    gzip_disable  "msie6";
     gzip_types
-        text/plain
-        text/css
-        text/js
-        text/xml
-        text/javascript
+        application/atom+xml
         application/javascript
         application/x-javascript
         application/json
-        application/xml
         application/rss+xml
-        image/svg+xml;
+        application/vnd.ms-fontobject
+        application/x-font-ttf
+        application/x-web-app-manifest+json
+        application/xhtml+xml
+        application/xml
+        font/opentype
+        image/svg+xml
+        image/x-icon
+        text/css
+        text/javascript
+        text/js
+        text/plain
+        text/xml
+        text/x-component;
 
-    include	default-ssl;
+    include	 default-ssl;
 }