Overlay configuration for nginx hardening