nginx.conf

user  nginx;

worker_processes 1;

error_log  /var/log/nginx/error.log notice;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {
  include /etc/nginx/mime.types;
  default_type application/octet-stream;

  log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for"';
  access_log /var/log/nginx/access.log  main;

  sendfile on;
  tcp_nopush on;

  charset utf-8;

  gzip on;
  gzip_comp_level 6;
  gzip_min_length 1100;
  gzip_buffers 16 8k;
  gzip_proxied any;
  gunzip on;
  gzip_static always;
  gzip_types text/plain text/css text/javascript application/javascript;
  gzip_vary on;

  keepalive_timeout 65;
  port_in_redirect off;
  server_tokens off;

  add_header X-Frame-Options SAMEORIGIN;
  add_header X-Content-Type-Options nosniff;
  add_header X-XSS-Protection "1; mode=block";
  add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";

  server {
    listen 4567;
    server_name docs.notify.works;

    location / {
      root preview_static_files;
      index index.html;
    }

    location ~ /\. {
      deny all;
      return 404;
    }
  }

  server {
    listen 4567;
    server_name docs.notifications.service.gov.uk;

    location / {
      root production_static_files;
      index index.html;
    }

    location ~ /\. {
      deny all;
      return 404;
    }
  }
}