http {
    gzip on;
    gzip_types text/plain text/css application/json application/javascript;
    gzip_min_length 256;

    server {
        listen 80;
        server_name safe.local;
        root /var/www/site;

        add_header X-Frame-Options "SAMEORIGIN" always;
        add_header X-Content-Type-Options "nosniff" always;
        add_header Referrer-Policy "strict-origin-when-cross-origin" always;

        location / {
            try_files $uri $uri/ =404;
        }
    }
}