The following Gist file adds some security to Nginx and it’s well documented: