much improved default config for nginx