Again, this is a minimal and complete nginx config that makes CKAN work. It will likely change again when I set up Apache+mod_wsgi instead of gunicorn.