Disable server tokens.
Move client_max_body_size out of the location block and into the server block.