Many changes, see next lines
Added denyhosts and fail2ban for SSH security
Updated mediawiki repo url to match WMF move
Removed duplicate 'gzip on;' setting
Added text/javascript to gzip_types for ResourceLoader
Simplified nginx sites-enabled configuration
Added upstream nginx stable repository