Static site

Reverse proxy

Load balancing / upstream

Applied to each server line that doesn't already specify its own max_fails/fail_timeout (skipped for backup/down servers). When enabled, the Reverse proxy block's proxy_pass targets this upstream group by name instead of a single host.

Caching

Emits a top-level proxy_cache_path zone plus proxy_cache/proxy_cache_valid lines inside the Reverse proxy block's location — enable Reverse proxy too so they're actually applied.

SSL / TLS

Rate limiting

Gzip / Brotli compression

Belongs in the http {} context (e.g. /etc/nginx/conf.d/gzip.conf, included from http {}).