server {

    server_name epauto.ru;

    listen 443 quic;
    listen 443 ssl;
    listen [::]:443 ssl;
    listen [::]:443 quic;

    ssl_certificate /etc/letsencrypt/live/epauto.ru/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/epauto.ru/privkey.pem;

    root /www/html/epauto.ru/wordpress;

    more_set_headers 'Referrer-Policy : no-referrer-when-downgrade';

    access_log syslog:server=unix:/dev/log,tag=epauto,nohostname main;

    more_set_headers 'X-Robots-Tag: $robots';

    include /www/nginx/error_404.conf;

    include /www/nginx/error_server.conf;

    include /www/nginx/favicon.conf;

    include /www/nginx/google_prefetch.conf;

    include /www/nginx/wp_common.conf;

    location / {
        limit_except GET HEAD POST { deny all; }

        include  /www/nginx/headers.conf;

        location ~ ^[^.]*$ {

        fastcgi_param SCRIPT_FILENAME $document_root/index.php;
        include  /www/nginx/fastcgi.conf;

        }

        location ^~ /wp-json/ {
        if ($logged_out) { return 403; }
        limit_except GET HEAD POST OPTIONS { deny all; }
        fastcgi_param SCRIPT_FILENAME $document_root/index.php;
        include  /www/nginx/fastcgi.conf;
        }

        location ~ \.php$ {
        return 404;
        }
    }

    include  /www/nginx/wp_sitemap.conf;

    include  /www/nginx/static.conf;

}

#
# Redirect all www to non-www
#

    server {
        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;
        server_name www.epauto.ru;
        ssl_certificate         /etc/letsencrypt/live/epauto.ru/fullchain.pem;
        ssl_certificate_key     /etc/letsencrypt/live/epauto.ru/privkey.pem;
        more_set_headers 'Strict-Transport-Security : max-age=31536000; includeSubDomains; preload';
        return 301 https://epauto.ru$request_uri;
    }

    server {
        listen 80;
        listen [::]:80;
        server_name epauto.ru www.epauto.ru;
        return 301 https://epauto.ru$request_uri;
    }