server {

listen 443;
listen [::]:443;
listen 443 quic;
listen [::]:443 quic;

server_name             mitrofanov.ru;
ssl_certificate         /etc/letsencrypt/live/mitrofanov.ru/fullchain.pem;
ssl_certificate_key     /etc/letsencrypt/live/mitrofanov.ru/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/mitrofanov.ru/chain.pem;
access_log syslog:server=unix:/dev/log,tag=nginx_error,nohostname main if=$error_log;
access_log syslog:server=unix:/dev/log,tag=nginx_access,nohostname main if=$access_log;

            #include /etc/nginx/bots.d/blockbots.conf;

if ($da_block) { return 444;}

root    /www/html/maintenance/public;

index    index.html;

location @empty {
empty_gif;
access_log off;
}
location = /favicon.ico {
add_header Cache-Control private;
expires max;
try_files /favicon.ico @empty;
access_log off;
log_not_found off;
}

location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}

location / {

add_header Content-Security-Policy  "default-src 'self';" always;
add_header Retry-After 86400 always;

include /www/nconf/headers;

return 503;

}

}

# Remove if subdomain

server {
      listen 443;
      listen [::]:443;
      listen 443 quic;
      listen [::]:443 quic;
      server_name www.mitrofanov.ru;
      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
      ssl_certificate         /etc/letsencrypt/live/mitrofanov.ru/fullchain.pem;
      ssl_certificate_key     /etc/letsencrypt/live/mitrofanov.ru/privkey.pem;
      ssl_trusted_certificate /etc/letsencrypt/live/mitrofanov.ru/chain.pem;
      return 308 https://mitrofanov.ru$request_uri;

}

server {
      listen 80;
      listen [::]:80;
      server_name mitrofanov.ru www.mitrofanov.ru;
      return 301 https://mitrofanov.ru$request_uri;
}