default.conf

server {
    listen       80;
    #listen       443 ssl;
    server_name  localhost;

    # security: disable obsolete TLS 1.0 and 1.1
    # ssl_protocols TLSv1.2 TLSv1.3;

    # security: HSTS
    # add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    
    # security: content security policy (Application dependent)
    # add_header Content-Security-Policy "default-src 'self';" always;
    # add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';base-uri 'self';form-action 'self;" always;

    # security: X-XSS Protection
    # add_header X-XSS-Protection "1; mode=block";

    # security: secure cookie
    # proxy_cookie_path / "/; HTTPOnly; Secure;";

    error_page 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 421 422 423 424 425 426 428 429 431 451 500 501 502 503 504 505 506 507 508 510 511 /error.html;
    location = /error.html {
        root /usr/share/nginx/html;
        auth_basic off;
        internal;
        ssi on;
    }
    location = /favicon.ico {
        return 204;
        access_log off;
        log_not_found off;
    }

    # default site
    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;
    }

    # aoi-pmh proxy
    location /oai-pmh/ {
        resolver 127.0.0.11 ipv6=off;
        proxy_intercept_errors on;        
        proxy_pass http://localhost:6003/v0/;
    }        
}

map $status $status_text {
    400 'Bad Request';
    401 'Unauthorized';
    402 'Payment Required';
    403 'Forbidden';
    404 'Page Not Found';
    405 'Method Not Allowed';
    406 'Not Acceptable';
    407 'Proxy Authentication Required';
    408 'Request Timeout';
    409 'Conflict';
    410 'Gone';
    411 'Length Required';
    412 'Precondition Failed';
    413 'Payload Too Large';
    414 'URI Too Long';
    415 'Unsupported Media Type';
    416 'Range Not Satisfiable';
    417 'Expectation Failed';
    418 'I\'m a teapot';
    421 'Misdirected Request';
    422 'Unprocessable Entity';
    423 'Locked';
    424 'Failed Dependency';
    425 'Too Early';
    426 'Upgrade Required';
    428 'Precondition Required';
    429 'Too Many Requests';
    431 'Request Header Fields Too Large';
    451 'Unavailable For Legal Reasons';
    500 'Internal Server Error';
    501 'Not Implemented';
    502 'Bad Gateway';
    503 'Service Unavailable';
    504 'Gateway Timeout';
    505 'HTTP Version Not Supported';
    506 'Variant Also Negotiates';
    507 'Insufficient Storage';
    508 'Loop Detected';
    510 'Not Extended';
    511 'Network Authentication Required';
    default 'Something went wrong';
}