include includes/headers;
add_header Content-Security-Policy "default-src 'none'; report-uri /csp_violations;";
sendfile on;
sendfile_max_chunk 1m;
tcp_nopush on;
directio 4m;