bump nginx version, add TCP proxy support