server {

server_name msmcp.ru;

        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;

ssl_certificate /etc/letsencrypt/live/msmcp.ru/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/msmcp.ru/privkey.pem;
ssl_trusted_certificate  /etc/letsencrypt/live/msmcp.ru/chain.pem;

root /www/html/msmcp.ru/wordpress;

more_set_headers 'Referrer-Policy : strict-origin-when-cross-origin';

#access_log syslog:server=unix:/dev/log,tag=ephotel,nohostname main;

access_log off;

#        if ($bad_user_agent) {return 444;}
#        if ($da_block) {return 444;}
#        if ($bad_referer) {return 444;}

more_set_headers 'X-Robots-Tag: $robots';

        include /www/nginx/error_404.conf;

        include /www/nginx/error_server.conf;

        include /www/nginx/favicon.conf;

        include /www/nginx/google_prefetch.conf;

        include /www/nginx/wp_common.conf;


        location / {
            limit_except GET HEAD POST { deny all; }
            
            include  /www/nginx/headers.conf;

            #expires 2d;

            #add_header Cache-Control "public, no-transform";

            add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline'; frame-src 'self' *.amocrm.ru *.yandex.ru yandex.ru *.reservationsteps.ru reservationsteps.ru; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.amocrm.ru *.trustindex.io *.reservationsteps.ru *.yandex.ru *.yandex.net yastatic.net ajax.googleapis.com *.googletagmanager.com *.gstatic.com *.jsdelivr.net *.webvisor.org; connect-src 'self' *.amocrm.ru https://mc.yandex.ru *.trustindex.io;" always;

            location ~ ^[^.]*$ {

                fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                include  /www/nginx/fastcgi.conf;

#                fastcgi_cache       ephotel;
#                fastcgi_cache_valid 404 502 503 5m;
#                fastcgi_cache_valid 200 301 302 60m;
#                fastcgi_cache_valid any 1m;
#                include  /www/nginx/fastcgi_cache.conf;
                #more_set_headers 'X-FastCGI-Cache : $upstream_cache_status';
            }

 location ~ ^/wp-(?:cron|mail|signup)\.php$ {
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                 include  /www/nginx/fastcgi.conf;
             }

            location ^~ /wp-json/ {
                if ($logged_out) { return 403; }
                limit_except GET HEAD POST OPTIONS { deny all; }
                fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                include  /www/nginx/fastcgi.conf;
            }

            location ~ \.php$ {
                return 404;
            }
        }

        include  /www/nginx/wp_sitemap.conf;

        include  /www/nginx/static.conf;

    }

#
# Redirect all www to non-www
#

    server {
        listen 443 quic;
        listen 443 ssl;
        listen [::]:443 ssl;
        listen [::]:443 quic;
        server_name www.msmcp.ru;
 #       ssl_certificate         /etc/letsencrypt/live/ephotel.ru/fullchain.pem;
 #       ssl_certificate_key     /etc/letsencrypt/live/ephotel.ru/privkey.pem;
 #       ssl_trusted_certificate /etc/letsencrypt/live/ephotel.ru/chain.pem;
        return 301 https://msmcp.ru$request_uri;
    }

    server {
        listen 80;
        listen [::]:80;
        server_name msmcp.ru www.msmcp.ru;

        more_set_headers 'Strict-Transport-Security : max-age=31536000; includeSubDomains; preload';

        return 301 https://msmcp.ru$request_uri;
    }