server {
    listen 8080;
    server_name _;
    root /usr/share/nginx/html;
    index index.html;
    server_tokens off;
    gzip on;
    gzip_types text/css application/javascript application/manifest+json image/svg+xml;
    add_header Cache-Control 'no-cache' always;
    add_header X-Content-Type-Options nosniff always;
    add_header Referrer-Policy strict-origin-when-cross-origin always;
    add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'; connect-src 'self'; worker-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'" always;
    location = /healthz { access_log off; default_type text/plain; return 200 'ok'; }
    location = /sw.js { try_files $uri =404; }
    location = /index.html { try_files $uri =404; }
    location / { try_files $uri $uri/ =404; }
}