server {

      listen 80;
      listen [::]:80;
      listen 443 quic;
      listen 443 ssl;
      listen [::]:443 ssl;
      listen [::]:443 quic;

      server_name             east-point.site;

      ssl_certificate         /etc/letsencrypt/live/east-point.site/fullchain.pem;
      ssl_certificate_key     /etc/letsencrypt/live/east-point.site/privkey.pem;
      ssl_trusted_certificate /etc/letsencrypt/live/east-point.site/chain.pem;

      # Redirect to the correct place, if needed
      set $https_redirect 0;
      if ($server_port = 80) { set $https_redirect 1; }
      if ($host ~ '^www\.') { set $https_redirect 1; }
      if ($https_redirect = 1) {
      return 301 https://east-point.site$request_uri;
      }

      include /www/nconf/bot_out;
      include /www/nconf/errors_beautify;

      root    /www/html/east-point.site/public;

      more_set_headers  'X-Robots-Tag: $robots';

      include /www/nconf/common;

      set $admin_token '_cg["75^8fb=m\e#qc5]';

      location = /adminka {
            add_header Set-Cookie "admin_token=$admin_token; Path=/";
            return 302 "/wp-admin/";
      }

      include /www/nconf/wordpress;

      location / {

            limit_except GET HEAD POST { deny all; }

            if ($args ~ "^author=\d") { return 403;}

            include /www/nconf/headers_cors;
            include /www/nconf/headers;

#            add_header X-Cache $upstream_cache_status;

            add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline'; frame-src 'self'; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval';" always;

            location ~ ^[^.]*$ {

                  fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                  limit_req zone=main ;
                  include  /www/nconf/fcgi;

                  fastcgi_cache     allcache;
                  include  /www/nconf/fcache;
                  fastcgi_cache_valid 404 502 503 5m;
                  fastcgi_cache_valid 200 301 302 10h;

            }

            location ^~ /wp-json/ {

                  if ($cookie_admin_token = "") {
                  return 403;
                  }

                  limit_req zone=flood burst=200 nodelay ;
                  limit_except GET HEAD POST OPTIONS { deny all; }
                  fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                  include  /www/nconf/fcgi;
            }


            location ~ \.php$ {
                  return 444;
            }

      }


}