'self' only allows forms submitted to the same origin, which
breaks the "remote follow" form.  To allow remote following,
we want to allow forms to be submitted to any host.

installation/pleroma.nginx: Add 'always' to the security headers, so that they are included regardless of the status code

Closes: pleroma/pleroma#266

nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" directive instead

* Added OCSP Stapling
* Added SSL Cache
* Changed ciphers
* Specified ECDH curves

* Removed TLSv1 and TLSv1.1
* Added OCSP Stapling
* Added SSL Cache
* Changed ciphers
* Specified ECDH curves

proxy_ignore_client_abort will continue to fetch from upstream even if a client aborts the connection. This is highly recommended when cache is being used. If a client leaves/refreshes the page while a user's avatar or some other media is halfway loaded, the cached copy might in some cases be broken. Leaving future requests to the same URL broken until cache expires.

The built-in nginx default does not allow users to upload images
larger than 1 MB. This increases the maximum request size to match
the default Pleroma config upload_limit parameter. Some helpful
comments were also added.