#auto.mitrofanov.ru
#auto


#fastcgi_cache_path /var/cache/nginx/auto levels=1:2 keys_zone=auto:60m max_size=10M inactive=60m use_temp_path=off;

    server {

server_name auto.mitrofanov.ru;

        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;

#ssl_certificate /etc/letsencrypt/live/auto.mitrofanov.ru/fullchain.pem;
#ssl_certificate_key /etc/letsencrypt/live/auto.mitrofanov.ru/privkey.pem;
#ssl_trusted_certificate  /etc/letsencrypt/live/auto.mitrofanov.ru/chain.pem;

root /www/html/auto.mitrofanov.ru/wordpress;

more_set_headers 'Referrer-Policy : no-referrer-when-downgrade';

access_log syslog:server=unix:/dev/log,tag=auto,nohostname main;

more_set_headers 'X-Robots-Tag: $robots';

        include /www/nginx/error_404.conf;

        include /www/nginx/error_server.conf;

        include /www/nginx/favicon.conf;

        include /www/nginx/google_prefetch.conf;

        include /www/nginx/wp_common.conf;

        location / {
            limit_except GET HEAD POST { deny all; }
            
            include  /www/nginx/headers.conf;
#            add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline'; frame-src 'self' *.yandex.ru; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yastatic.net ajax.googleapis.com *.googletagmanager.com *.jsdelivr.net *.webvisor.org;" always;

            location ~ ^[^.]*$ {

                fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                include  /www/nginx/fastcgi.conf;

                #fastcgi_cache       auto;
                #fastcgi_cache_valid 404 502 503 5m;
                #fastcgi_cache_valid 200 301 302 60m;
                #fastcgi_cache_valid any 1m;
                #include  /www/nginx/fastcgi_cache.conf;
                #more_set_headers 'X-FastCGI-Cache : $upstream_cache_status';
            }

# location ~ ^/wp-(?:cron|mail|signup)\.php$ {
#                 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
#                 include  /www/nginx/fastcgi.conf;
#             }

            location ^~ /wp-json/ {
                if ($logged_out) { return 403; }
                limit_except GET HEAD POST OPTIONS { deny all; }
                fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                include  /www/nginx/fastcgi.conf;
            }

            location ~ \.php$ {
                return 404;
            }
        }

        include  /www/nginx/wp_sitemap.conf;

        include  /www/nginx/static.conf;

    }

#
# Redirect all www to non-www
#

    server {
        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;
        server_name www.auto.mitrofanov.ru;
        return 301 https://auto.mitrofanov.ru$request_uri;
    }

    server {
        listen 80;
        listen [::]:80;
        server_name auto.mitrofanov.ru www.auto.mitrofanov.ru;

        more_set_headers 'Strict-Transport-Security : max-age=31536000; includeSubDomains; preload';

        return 301 https://auto.mitrofanov.ru$request_uri;
    }