initial commit

Forming the framework for fed secure nginx baseline. These fixes are
currently in deployment in a fed intranet.
SELinux activation and initial config

Will move to own file, but want to see everything in context first
remove nginx modules we don't need

some of these we might want to add back into the baseline
refactor for out of date or un-wanted controls

Lots of stale stuff needed to go. Re: referral spam, there’s no perm
fix to this + we don’t post referrals, so it’s pointless to make us a
target
more server and location changes

prevent mass hot-linking
drops abusive IPs
fit and finish: add email link to footer; change "demo" to "pilot" in title bar
fit and finish: add email link to footer; change "demo" to "pilot" in title bar
fit and finish: add email link to footer; change "demo" to "pilot" in title bar
fit and finish: add email link to footer; change "demo" to "pilot" in title bar
clean up for PR, adds sample nginx.conf with changes
edits for markdown
more md edits
cleanup
removing final refs to scripting

will come back as part of manifests
updated readme.md
Removing ref to Helmet
Deny framing
update markdown
turn gzip on down to 1000

we should eventually test different values