gzip-related settings.

Currently only set gzip_vary in nginx.conf. Fill out the documentation here and update that file accordingly.

Encryption settings.

Create a dhparam.pem file and use it. See here for some tips, but that section may need updating.

sendfile-related settings.

See here to get started, and create documentation for it too.

Document pcre_jit on.

Document log-related settings.

Document worker_processes auto and events.worker_connections 1024

Document client_max_body_size with notes about when it should be raised.

Also document that with container images that will be used with larger files, e.g. php:readwrite.

Document server_tokens off.

Document include /etc/nginx/mime.types and default_type application/octet-stream.

Consider vendoring /etc/nginx/mime.types.

Review {uwsgi,fastcgi,graphql,proxy}.conf for any other settings that should be added.