minor nginx fixes

nginx.conf

@@ -3,6 +3,7 @@
 #
 
 worker_processes  1;
+daemon off;
 
 events {
     worker_connections  1024;
@@ -22,11 +23,15 @@ http {
                       '"$http_user_agent" "$http_x_forwarded_for"';
     access_log  /var/log/nginx/access.log  main;
 
+    # tmp path
+
+    client_body_temp_path /tmp 1 2;
+
     # Buffers
 
     client_body_buffer_size 10K;
     client_header_buffer_size 1k;
-    client_max_body_size 10m;
+    client_max_body_size 8m;
     large_client_header_buffers 2 1k;
 
     # Timeouts
@@ -45,12 +50,18 @@ http {
     gzip_proxied     expired no-cache no-store private auth;
     gzip_types       text/plain application/x-javascript text/xml text/css application/xml application/json;
 
+    # DDoS Protection Settings
+
+    limit_conn_zone $binary_remote_addr zone=conn_limit_per_ip:10m;
+    limit_req_zone $binary_remote_addr zone=req_limit_per_ip:10m rate=50r/s;
+
     # thisissoon with prerender.io
 
     server {
-        listen 80;
         server_name thisissoon.com thisissoon.soon.build;
 
+        listen 80;
+
         root /thisissoon;
 
         location ~ ^/(media|static) {