adding nginx best practices on buffering and body size, gzip

hosting/kubernetes/nginx/nginx.conf

@@ -12,7 +12,19 @@ http {
   limit_req_zone $binary_remote_addr zone=ratelimit:10m rate=10r/s;
   include       /etc/nginx/mime.types;
   default_type  application/octet-stream;
-
+  charset utf-8;
+  sendfile on;
+  tcp_nopush on;
+  tcp_nodelay on;
+  server_tokens off;
+  types_hash_max_size 2048;
+
+  # buffering
+  client_body_buffer_size 1K;
+  client_header_buffer_size 1k;
+  client_max_body_size 1k;
+  ignore_invalid_headers off;
+  proxy_buffering off;
 
   log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                     '$status $body_bytes_sent "$http_referer" '
@@ -25,9 +37,6 @@ http {
   server { 
     listen       10000 default_server;
     server_name  _;
-    client_max_body_size 1000m;
-    ignore_invalid_headers off;
-    proxy_buffering off;
 
     # Security Headers
     add_header X-Frame-Options SAMEORIGIN always;
@@ -107,7 +116,12 @@ http {
     client_header_timeout 60;
     client_body_timeout   60;
     keepalive_timeout     60;
-    gzip                  on;
-    gzip_comp_level       4;
+
+    # gzip
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_types text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml;
   }
 }

hosting/proxy/nginx.conf

@@ -12,6 +12,19 @@ http {
   limit_req_zone $binary_remote_addr zone=ratelimit:10m rate=10r/s;
   include       /etc/nginx/mime.types;
   default_type  application/octet-stream;
+  charset utf-8;
+	sendfile on;
+	tcp_nopush on;
+	tcp_nodelay on;
+	server_tokens off;
+  types_hash_max_size 2048;
+
+  # buffering 
+  client_body_buffer_size 1K;
+  client_header_buffer_size 1k;
+  client_max_body_size 1k;
+  ignore_invalid_headers off;
+  proxy_buffering off;
 
 
   log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
@@ -111,7 +124,12 @@ http {
     client_header_timeout 60;
     client_body_timeout   60;
     keepalive_timeout     60;
-    gzip                  on;
-    gzip_comp_level       4;
+
+    # gzip
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_types text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml;
   }
 }