#use a minimal server header
server_tokens off;

map $scheme $cgi_https {
        default "off";
        "https" "off";
}