server {

      listen 443 quic;
      listen 443 ssl;
      listen [::]:443 ssl;
      listen [::]:443 quic;

      server_name dobrolom.com;

      ssl_certificate         /etc/letsencrypt/live/dobrolom.com/fullchain.pem;
      ssl_certificate_key     /etc/letsencrypt/live/dobrolom.com/privkey.pem;
      ssl_trusted_certificate /etc/letsencrypt/live/dobrolom.com/chain.pem;

      index   index.html;

      root /www/html/dobrolom.com/html;

      access_log syslog:server=unix:/dev/log,tag=dobrolomcom,nohostname main;

      if ($bad_user_agent) {return 444;}
      if ($da_block) {return 444;}
      if ($bad_referer) {return 444;}

      add_header Referrer-Policy "no-referrer-when-downgrade";

      add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline' east-point.site; frame-src 'self'; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval';" always;

      add_header X-Robots-Tag $robots;

      include /www/nginx/error_404.conf;
      include /www/nginx/error_server.conf;
      include /www/nginx/favicon.conf;
      include /www/nginx/google_prefetch.conf;
      include /www/nginx/static.conf;

}

#
# Redirect all www to non-www
#

server {
      listen 443 quic;
      listen 443 ssl;
      listen [::]:443 ssl;
      listen [::]:443 quic;
      server_name www.dobrolom.com;

      ssl_certificate         /etc/letsencrypt/live/dobrolom.com/fullchain.pem;
      ssl_certificate_key     /etc/letsencrypt/live/dobrolom.com/privkey.pem;
      ssl_trusted_certificate /etc/letsencrypt/live/dobrolom.com/chain.pem;

      return 301 https://dobrolom.com$request_uri;
}

server {
      listen 80;
      listen [::]:80;
      server_name dobrolom.com www.dobrolom.com;
      return 301 https://dobrolom.com$request_uri;
}