server {

listen 80;
listen [::]:80;
listen 443 quic;
listen 443 ssl;
listen [::]:443 ssl;
listen [::]:443 quic;

server_name             invest.mitrofanov.ru;

ssl_certificate         /etc/letsencrypt/live/invest.mitrofanov.ru/fullchain.pem;
ssl_certificate_key     /etc/letsencrypt/live/invest.mitrofanov.ru/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/invest.mitrofanov.ru/chain.pem;

# Redirect to the correct place, if needed
set $https_redirect 0;
if ($server_port = 80) { set $https_redirect 1; }
if ($host ~ '^www\.') { set $https_redirect 1; }
if ($https_redirect = 1) {
return 301 https://SERVERNAME$request_uri;
}

include /www/nconf/bot_out;
include /www/nconf/errors_beautify;
error_page 404 /error.html;
      
root    /www/html/maintenance/public;

more_set_headers  'X-Content-Type-Options: nosniff' 'Expires: $expires' 'Cache-Control: $cache_control';

more_set_headers  'X-Robots-Tag: none';

location @empty {
    empty_gif;
    access_log off;
    }
location = /favicon.ico {
  try_files /favicon.ico @empty;
  access_log off;
  log_not_found off;
}

location /img/ {

      add_header Referrer-Policy           `strict-origin-when-cross-origin` always;

}
  
  error_page 503 @maintenance;
  location @maintenance {
    
    rewrite ^(.*)$ /index.html break;
  }
  location / {
    return 503;
  }
}