user              nginx;
worker_processes  auto;
error_log         /var/log/nginx/error.log notice;
pid               /run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include            /etc/nginx/mime.types;
    default_type       application/octet-stream;
    server_tokens      off;

    log_format custom_combined '$remote_addr - $remote_user [$time_local] "$host" "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent"';

    access_log         /var/log/nginx/access.log  custom_combined;
    sendfile           on;
    tcp_nopush         on;
    keepalive_timeout  65;
    gzip               on;

    set_real_ip_from 10.0.0.0/8;
    set_real_ip_from 172.16.0.0/12; # Includes Docker subnet
    set_real_ip_from 192.168.0.0/16;

    include include/*.conf;
    include conf.d/*.conf;
    include /sites/*/nginx.conf;
}