moving nginx global settings to individual roles