add optional nginx configs to make more secure