- we are using www-data to run nginx, so set limit accordingly
- gzip compression level to 1
- worker_connections to a more sane 20000
- worker_rlimit_nofile to 999999
- add proxy_read_timeout of 300 seconds
- add invalid_header as a possible proxy_next_upstream option