Update nginx and enable hardened build