nginx.conf.j2

# {{ ansible_managed }}

user www-data;
worker_processes {{ nginx_worker_processes }};

pid /run/nginx.pid;

include /etc/nginx/modules-enabled/*.conf;

events {

  worker_connections 1024;
  accept_mutex off;
  use epoll;

}

http {

  sendfile on;
  tcp_nopush on;
  tcp_nodelay on;
  keepalive_timeout 65;
  types_hash_max_size 2048;
  server_tokens off;
  include /etc/nginx/mime.types;
  default_type application/octet-stream;

  access_log /var/log/nginx/access.log;
  error_log /var/log/nginx/error.log;

  gzip on;
  gzip_types *;
  gzip_comp_level 6;
  gzip_disable "msie6";

  map $http_accept_language $lang {
    default en;
    "~*^((|,)\s*(?!(de|en))\w+(-\w+)?(;q=[\d\.]+)?)*(|,)\s*en\b" en;
    "~*^((|,)\s*(?!(de|en))\w+(-\w+)?(;q=[\d\.]+)?)*(|,)\s*de\b" de;
  }

  include /etc/nginx/sites-enabled/*;

}