server {

    listen 443 quic;
    listen 443 ssl;
    listen [::]:443 ssl;
    listen [::]:443 quic;

    server_name kanban.mitrofanov.ru;

    root /www/html/kanboard;

    index index.php;

    more_set_headers 'X-Robots-Tag: noindex, nofollow, nosnippet, noarchive';
#    more_set_headers 'Referrer-Policy : no-referrer-when-downgrade';

    access_log syslog:server=unix:/dev/log,tag=kanban,nohostname main;


more_set_headers Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline'; frame-src 'self'; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval';" always;


    client_max_body_size 32M;

    location / {
        try_files $uri $uri/ /index.php$is_args$args;
    }

    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include  /www/nginx/fastcgi.conf;
    }


    location ~* /data {
        deny all;
        return 404;
    }

    location ~* ^.+\.(log|sqlite)$ {
        return 404;
    }

    location ~ /\.ht {
        return 404;
    }

    location ~* ^.+\.(ico|jpg|gif|png|css|js|svg|eot|ttf|woff|woff2|otf)$ {
        log_not_found off;
        expires 7d;
        etag on;
    }

}