#RISOTTO: do not compare
client_max_body_size {{ nginx_post_max_size }}M;
client_body_buffer_size 128k;

server_names_hash_bucket_size {{ nginx_hash_bucket_size }};
proxy_buffer_size   16k;
proxy_buffers   6 32k;
proxy_busy_buffers_size   32k;
large_client_header_buffers 8 8k;

client_body_temp_path /var/tmp/client_body;
proxy_temp_path /var/tmp/proxy;
fastcgi_temp_path /var/tmp/fastcgi;
uwsgi_temp_path /var/tmp/uwsgi;
scgi_temp_path /var/tmp/scgi;


# Always trust ourself
{% for interface in range(zones_list|length) %}
set_real_ip_from {{ general.network['interface_' + interface|string]['ip_eth' + interface|string] }};
{% endfor %}
{% if 'revprox' in general %}
# Define globally trusted reverse proxy
set_real_ip_from {{ general.revprox.revprox_client_server_ip }};
{% endif %}
real_ip_recursive on;