nginx.conf

user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
        worker_connections 768;
        # multi_accept on;
}

http {

        sendfile on;
        tcp_nopush on;
        tcp_nodelay on;
        keepalive_timeout 65;
        types_hash_max_size 2048;
        # server_tokens off;


        include /etc/nginx/mime.types;
        default_type application/octet-stream;

        #ssl_protocols TLSv1.2 TLSv1.3;
        #ssl_prefer_server_ciphers on;

        access_log /var/log/nginx/access.log;
        error_log /var/log/nginx/error.log;

        gzip on;

        server {
            listen 80;
            allow 13.52.5.96/28;
            allow 13.236.8.224/28;
            allow 18.136.214.96/28;
            allow 18.184.99.224/28;
            allow 18.234.32.224/28;
            allow 18.246.31.224/28;
            allow 52.215.192.224/28;
            allow 104.192.137.240/28;
            allow 104.192.138.240/28;
            allow 104.192.140.240/28;
            allow 104.192.142.240/28;
            allow 104.192.143.240/28;
            allow 185.166.143.240/28;
            allow 185.166.142.240/28;
            deny all;
        location ~ ^/bitbucket/(.+)$ {
            rewrite ^/bitbucket/(.+)$ /generic-webhook-trigger/invoke?token=$1 break;
            proxy_pass http://jenkins.int.myslinsky.com;
            limit_except POST {
              deny all;
            }
            proxy_connect_timeout 150;
            proxy_send_timeout 100;
            proxy_read_timeout 100;
            proxy_buffers 4 32k;
            client_max_body_size 8m;
            client_body_buffer_size 128k;
          }
        }
}