nginx.j2 tweaked further