lock nginx at ~> 1.7.0