server {

        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;

        server_name finance.mitrofanov.ru;

        index   index.html;

        root /www/html/finance.mitrofanov.ru/public;

        access_log syslog:server=unix:/dev/log,tag=finance,nohostname main;

#        if ($bad_user_agent) {return 444;}
#        if ($da_block) {return 444;}
#        if ($bad_referer) {return 444;}

        add_header Referrer-Policy "no-referrer-when-downgrade";

        add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline'; frame-src 'self' blob: yandex.ru; frame-ancestors 'self' yandex.ru; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' yandex.ru *.yandex.ru *.yandex.net yastatic.net ajax.googleapis.com *.googletagmanager.com rawgit.com;"     always;

        add_header X-Robots-Tag $robots;

        include /www/nginx/error_404.conf;
        include /www/nginx/error_server.conf;
        include /www/nginx/favicon.conf;
        include /www/nginx/google_prefetch.conf;
        include /www/nginx/static.conf;

    }

#
# Redirect all www to non-www
#

    server {
        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;
        server_name www.finance.mitrofanov.ru;
        return 301 https://finance.mitrofanov.ru$request_uri;
    }

    server {
        listen 80;
        listen [::]:80;
        server_name finance.mitrofanov.ru www.finance.mitrofanov.ru;
        return 301 https://finance.mitrofanov.ru$request_uri;
    }