location = /robots.txt {
fastcgi_param SCRIPT_FILENAME $document_root/index.php;
include  /www/nconf/fcgi;
}

location = /index.php {
    access_log off;
    log_not_found off;
    return 301 /;

}

location = /wp-admin {
    access_log off;
    log_not_found off;
    return 301 /wp-admin/;
}

location ~ ^/(wp-content|wp-includes)/  {
    limit_except GET HEAD { deny all; }
    add_header Referrer-Policy           'strict-origin-when-cross-origin' always;
    add_header Cache-Control $cache_control;
    expires $expires;
    location ~ \.php$ {
        return 444;
    }
}

location /wp-admin/ {
    include /www/nconf/headers_cors;
    client_body_buffer_size     30M;
    client_max_body_size        30M;
    index index.php;
    limit_except GET HEAD POST OPTIONS { deny all; }
    location ~ ^/wp-admin/[\w-]+\.php$ {
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include  /www/nconf/fcgi;
    }
}

location /wp-login.php {
    limit_req zone=login burst=4 nodelay;
    limit_except GET HEAD POST { deny all; }
    if ($cookie_admin_token != $admin_token) {
        return 403;
    }
    fastcgi_param SCRIPT_FILENAME $request_filename;
    include  /www/nconf/fcgi;
}