subrequest_output_buffer_size     16k;
client_body_buffer_size           16k;
client_header_buffer_size          2k;
large_client_header_buffers    8  16k;

## lowering from 16k to 4k to improve time-to-first-byte
ssl_buffer_size  4k;