We are using the following configuration for nginx, taken from the Volto deploying docs:
Plone Foundation Code of Conduct