include includes/headers;
add_header Content-Security-Policy "default-src 'none';";
sendfile on;
sendfile_max_chunk 1m;
tcp_nopush on;
directio 4m;