server {

      listen 80;
      listen [::]:80;
      listen 443 quic;
      listen 443 ssl;
      listen [::]:443 ssl;
      listen [::]:443 quic;

      server_name             auto.mitrofanov.ru;

      ssl_certificate         /etc/letsencrypt/live/auto.mitrofanov.ru/fullchain.pem;
      ssl_certificate_key     /etc/letsencrypt/live/auto.mitrofanov.ru/privkey.pem;
      ssl_trusted_certificate /etc/letsencrypt/live/auto.mitrofanov.ru/chain.pem;

      # Redirect to the correct place, if needed
      set $https_redirect 0;
      if ($server_port = 80) { set $https_redirect 1; }
      if ($host ~ '^www\.') { set $https_redirect 1; }
      if ($https_redirect = 1) {
      return 301 https://SERVERNAME$request_uri;
      }

      access_log syslog:server=unix:/dev/log,tag=auto,nohostname main;

      include /www/nconf/bot_out;
      include /www/nconf/errors_beautify;

      root    /www/html/auto.mitrofanov.ru/wordpress;

      more_set_headers  'X-Robots-Tag: $robots';

      include /www/nconf/common;

      set $admin_token '_cg["75^8fb=m\e#qc5]';

      location = /catalog/ {
            return 301 https://auto.mitrofanov.ru/autopark;
      }

      location = /autoadminka {
            add_header Set-Cookie "admin_token=$admin_token; Path=/";
            return 302 "/wp-admin/";
      }

      include /www/nconf/wordpress;
      include /www/nconf/wordpress_sitemap;

      # location = /autoadminka {
      #       rewrite ^ https://auto.mitrofanov.ru/wp-login.php?p=88AwPp359SpHBipt3vgxMJzEBYYe last;
      # }


      location / {

            limit_except GET HEAD POST { deny all; }

            if ($args ~ "^author=\d") { return 403;}

            include /www/nconf/headers_cors;
            include /www/nconf/headers;

            add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline'; frame-src 'self' *.yandex.ru; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yastatic.net ajax.googleapis.com *.googletagmanager.com *.jsdelivr.net *.webvisor.org;" always;

            location ~ ^[^.]*$ {

                  fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                  limit_req zone=main ;
                  include  /www/nconf/fcgi;

                  fastcgi_cache     allcache;
                  include  /www/nconf/fcache;
                  fastcgi_cache_valid 404 502 503 5m;
                  fastcgi_cache_valid 200 301 302 10h;

            }

            location ^~ /wp-json/ {

                  if ($cookie_admin_token = "") {
                  return 403;
                  }

                  limit_req zone=flood burst=200 nodelay ;
                  limit_except GET HEAD POST OPTIONS { deny all; }
                  fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                  include  /www/nconf/fcgi;
            }

            location ~ \.php$ {
                  return 444;
                  #fastcgi_param SCRIPT_FILENAME $request_filename;
                  #include  /www/nconf/fcgi;
            }

      }


}