a few more nginx tweaks