make nginx role more logical