server {

      listen 80;
      listen [::]:80;
            listen 443 quic;
      listen 443 ssl;
      listen [::]:443 ssl;
      listen [::]:443 quic;

      server_name             xn--80aeviqgdy3eo.su www.xn--80aeviqgdy3eo.su;

     ssl_certificate         /etc/letsencrypt/live/xn--80aeviqgdy3eo.su/fullchain.pem;
     ssl_certificate_key     /etc/letsencrypt/live/xn--80aeviqgdy3eo.su/privkey.pem;
     ssl_trusted_certificate /etc/letsencrypt/live/xn--80aeviqgdy3eo.su/chain.pem;

      set $https_redirect 0;
      if ($server_port = 80) { set $https_redirect 1; }
      if ($host ~ '^www\.') { set $https_redirect 1; }
      if ($https_redirect = 1) {
      return 301 https://SERVERNAME$request_uri;
      }

      #access_log syslog:server=unix:/dev/log,tag=rudder,nohostname main;

      access_log off;

      include /www/nconf/bot_out;
      include /www/nconf/errors_beautify;

      root    /www/html/rudder/wordpress;


      more_set_headers  'X-Robots-Tag: $robots';

      include /www/nconf/common;

            set $admin_token '_cg["75^8fb=m\e#qc5]';

      location = /adminka {
            add_header Set-Cookie "admin_token=$admin_token; Path=/";
            return 302 "/wp-admin/";
      }

      include /www/nconf/wordpress;
      include /www/nconf/wordpress_sitemap;

      location / {

            limit_except GET HEAD POST { deny all; }

            if ($args ~ "^author=\d") { return 403;}

            include /www/nconf/headers_cors;
            include /www/nconf/headers;

            add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline'; frame-src 'self' *.yandex.ru yandex.ru; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.yandex.net yastatic.net ajax.googleapis.com *.googletagmanager.com *.gstatic.com *.jsdelivr.net *.webvisor.org;" always;

            location ~ ^[^.]*$ {

                  fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                  limit_req zone=main ;
                  include  /www/nconf/fcgi;

                  fastcgi_cache     allcache;
                  include  /www/nconf/fcache;
                  fastcgi_cache_valid 404 502 503 5m;
                  fastcgi_cache_valid 200 301 302 10h;
            }



            location ^~ /wp-json/ {

                  if ($cookie_admin_token = "") {
                  return 403;
                  }

                  limit_req zone=flood burst=200 nodelay ;
                  limit_except GET HEAD POST OPTIONS { deny all; }
                  fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                  include  /www/nconf/fcgi;
            }

            location ~ \.php$ {
                  return 444;

            }

      }


}