diff --git a/contrib/docker-default.conf.template b/contrib/docker-default.conf.template
new file mode 100644
index 0000000..dc91767
--- /dev/null
+++ b/contrib/docker-default.conf.template
@@ -0,0 +1,39 @@
+upstream fpm {
+  server pixelfed-app:9000;
+}
+
+server {
+    listen ${NGINX_PORT};
+    server_name pix.solarpunk.moe;                    # change this to your fqdn
+    root /var/www/public;         # path to repo/public
+
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-XSS-Protection "1; mode=block";
+    add_header X-Content-Type-Options "nosniff";
+
+    index index.html index.htm index.php;
+
+    charset utf-8;
+    client_max_body_size 125M;   # or your desired limit
+
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+    }
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+
+    error_page 404 /index.php;
+
+    location ~ \.php$ {
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass fpm;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; # or $request_filename
+    }
+
+    location ~ /\.(?!well-known).* {
+        deny all;
+    }
+}