server {

        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;

        server_name xn--90afwehbbn.xn--p1ai;

        ssl_certificate         /etc/letsencrypt/live/xn--90afwehbbn.xn--p1ai/fullchain.pem;
        ssl_certificate_key     /etc/letsencrypt/live/xn--90afwehbbn.xn--p1ai/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/xn--90afwehbbn.xn--p1ai/chain.pem;

        index   index.html;

        root /www/html/dobrolom.rf/html;

        access_log syslog:server=unix:/dev/log,tag=dobrolomrf,nohostname main;

        if ($bad_user_agent) {return 444;}
        if ($da_block) {return 444;}
        if ($bad_referer) {return 444;}

        add_header Referrer-Policy "no-referrer-when-downgrade";

        add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline' east-point.site; frame-src 'self'; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval';" always;

        add_header X-Robots-Tag $robots;

        include /www/nginx/error_404.conf;
        include /www/nginx/error_server.conf;
        include /www/nginx/favicon.conf;
        include /www/nginx/google_prefetch.conf;
        include /www/nginx/static.conf;

    }

#
# Redirect all www to non-www
#

    server {
        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;
        server_name www.xn--90afwehbbn.xn--p1ai;
        ssl_certificate         /etc/letsencrypt/live/xn--90afwehbbn.xn--p1ai/fullchain.pem;
        ssl_certificate_key     /etc/letsencrypt/live/xn--90afwehbbn.xn--p1ai/privkey.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/xn--90afwehbbn.xn--p1ai/chain.pem;
        return 301 https://xn--90afwehbbn.xn--p1ai$request_uri;
    }

    server {
        listen 80;
        listen [::]:80;
        server_name xn--90afwehbbn.xn--p1ai www.xn--90afwehbbn.xn--p1ai;
        return 301 https://xn--90afwehbbn.xn--p1ai$request_uri;
    }