move nginx to its own recipe