Use non read-only path

compose.yml

@@ -22,7 +22,7 @@ services:
       - nginx-cache:/var/cache/nginx/peertube-media-cache:rw
     configs:
       - source: nginx_config
-        target: /etc/nginx/conf.d/default.conf
+        target: /etc/nginx/nginx.conf
     deploy:
       restart_policy:
         condition: on-failure

nginx.conf.tmpl

@@ -1,10 +1,17 @@
-upstream backend {
+user www-data;
-  server app:9000;
+
+events {
+  worker_connections 768;
 }
 
-proxy_cache_path /var/cache/nginx/peertube-media-cache levels=1:2 keys_zone=peertube_media_cache:5m max_size=40g inactive=72h use_temp_path=off;
+http {
+  upstream backend {
+    server app:9000;
+  }
 
-server {
+  proxy_cache_path /var/cache/nginx/peertube-media-cache levels=1:2 keys_zone=peertube_media_cache:5m max_size=40g inactive=72h use_temp_path=off;
+
+  server {
     listen 80;
     server_name {{ env "DOMAIN" }};
 
@@ -204,7 +211,7 @@ server {
       sendfile_max_chunk 1M; # prevent one fast connection from entirely occupying the worker process.
                              # should be > 800k.
 
-{{ if (env "NGINX_WEBSEED_PROXY_ENABLE") }}
+  {{ if (env "NGINX_WEBSEED_PROXY_ENABLE") }}
       proxy_connect_timeout       70;
       proxy_read_timeout          1200;
       proxy_send_timeout          1200;
@@ -223,7 +230,7 @@ server {
       proxy_redirect off;
 
       proxy_pass {{ env "NGINX_WEBSEED_PROXY_URI" }};
-{{ else }}
+  {{ else }}
       {{ if (env "NGINX_WEBSEED_CDN_ENABLE") }}
       # Use this in tandem with fuse-mounting i.e. https://docs.joinpeertube.org/admin-remote-storage
       # to serve files directly from a public bucket without proxying.
@@ -237,6 +244,7 @@ server {
       rewrite ^/static/(.*)$         /$1        break;
       try_files $uri @api;
       {{ end }}
-{{ end }}
+  {{ end }}
+    }
   }
 }