#fastcgi_cache_path /var/cache/nginx/metal levels=1:2 keys_zone=metal:60m max_size=10M inactive=60m use_temp_path=off;

    server {

server_name metal.mitrofanov.ru;

        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;

root /www/html/metal.mitrofanov.ru/wordpress;

more_set_headers 'Referrer-Policy : no-referrer-when-downgrade';

access_log syslog:server=unix:/dev/log,tag=metal,nohostname main;

#        if ($bad_user_agent) {return 444;}
#        if ($da_block) {return 444;}
#        if ($bad_referer) {return 444;}

more_set_headers 'X-Robots-Tag: $robots';

        include /www/nginx/error_404.conf;

        include /www/nginx/error_server.conf;

        include /www/nginx/favicon.conf;

        include /www/nginx/google_prefetch.conf;

        include /www/nginx/wp_common.conf;

        location / {
            limit_except GET HEAD POST { deny all; }
            
            include  /www/nginx/headers.conf;

            add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline' cdn.jsdelivr.net; frame-src 'self' yandex.ru; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net unpkg.com cdn.gtranslate.net translate.google.com *.googleapis.com *.yandex.ru *.webvisor.org;" always;

            location ~ ^[^.]*$ {

                fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                include  /www/nginx/fastcgi.conf;

                #fastcgi_cache       metal;
                #fastcgi_cache_valid 404 502 503 5m;
                #fastcgi_cache_valid 200 301 302 60m;
                #fastcgi_cache_valid any 1m;
                #include  /www/nginx/fastcgi_cache.conf;
                #more_set_headers 'X-FastCGI-Cache : $upstream_cache_status';
            }

# location ~ ^/wp-(?:cron|mail|signup)\.php$ {
#                 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
#                 include  /www/nginx/fastcgi.conf;
#             }

            location ^~ /wp-json/ {
                if ($logged_out) { return 403; }
                limit_except GET HEAD POST OPTIONS { deny all; }
                fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                include  /www/nginx/fastcgi.conf;
            }

            location ~ \.php$ {
                return 404;
            }
        }

        include  /www/nginx/wp_sitemap.conf;

        include  /www/nginx/static.conf;

    }

#
# Redirect all www to non-www
#

    server {
        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;
        server_name www.metal.mitrofanov.ru;
        return 301 https://metal.mitrofanov.ru$request_uri;
    }

    server {
        listen 80;
        listen [::]:80;
        server_name metal.mitrofanov.ru www.metal.mitrofanov.ru;

        more_set_headers 'Strict-Transport-Security : max-age=31536000; includeSubDomains; preload';

        return 301 https://metal.mitrofanov.ru$request_uri;
    }