server {

      listen 80;
      listen [::]:80;
      listen 443 quic;
      listen 443 ssl;
      listen [::]:443 ssl;
      listen [::]:443 quic;

      server_name             tour.mitrofanov.ru;

      ssl_certificate         /etc/letsencrypt/live/tour.mitrofanov.ru/fullchain.pem;
      ssl_certificate_key     /etc/letsencrypt/live/tour.mitrofanov.ru/privkey.pem;
      ssl_trusted_certificate /etc/letsencrypt/live/tour.mitrofanov.ru/chain.pem;

      # Redirect to the correct place, if needed
      set $https_redirect 0;
      if ($server_port = 80) { set $https_redirect 1; }
      if ($host ~ '^www\.') { set $https_redirect 1; }
      if ($https_redirect = 1) {
      return 301 https://SERVERNAME$request_uri;
      }

      access_log syslog:server=unix:/dev/log,tag=tour,nohostname main;


      include /www/nconf/bot_out;
      include /www/nconf/errors_beautify;

      root    /www/html/tour.mitrofanov.ru/public;

      more_set_headers  'X-Robots-Tag: $robots';

      include /www/nconf/common;

      set $admin_token '_cg["75^8fb=m\e#qc5]';

      location = /touradminka {
            add_header Set-Cookie "admin_token=$admin_token; Path=/";
            return 302 "/wp-admin/";
      }

      include /www/nconf/wordpress;

      #Yoast SEO Sitemaps
      location ~ ([^/]*)sitemap(.*).x(m|s)l$ {
            ## this rewrites sitemap.xml to /sitemap_index.xml
            rewrite ^/sitemap.xml$ /sitemap_index.xml permanent;
            ## this makes the XML sitemaps work
            rewrite ^/([a-z]+)?-?sitemap.xsl$ /index.php?yoast-sitemap-xsl=$1 last;
            rewrite ^/sitemap_index.xml$ /index.php?sitemap=1 last;
            rewrite ^/([^/]+?)-sitemap([0-9]+)?.xml$ /index.php?sitemap=$1&sitemap_n=$2 last;
            ## The following lines are optional for the premium extensions
            ## News SEO
            #rewrite ^/news-sitemap.xml$ /index.php?sitemap=wpseo_news last;
            ## Local SEO
            #rewrite ^/locations.kml$ /index.php?sitemap=wpseo_local_kml last;
            #rewrite ^/geo-sitemap.xml$ /index.php?sitemap=wpseo_local last;
            ## Video SEO
            #rewrite ^/video-sitemap.xsl$ /index.php?yoast-sitemap-xsl=video last;
      }

      location / {

            limit_except GET HEAD POST { deny all; }

            if ($args ~ "^author=\d") { return 403;}

            include /www/nconf/headers_cors;
            include /www/nconf/headers;

            add_header Content-Security-Policy  "default-src 'self' https: data: 'unsafe-inline' cdn.jsdelivr.net; frame-src 'self' yandex.ru; frame-ancestors 'self'; form-action 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net unpkg.com cdn.gtranslate.net translate.google.com *.googleapis.com *.yandex.ru *.webvisor.org;" always;

            location ~ ^[^.]*$ {

                  fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                  limit_req zone=main ;
                  include  /www/nconf/fcgi;

                  # fastcgi_cache     allcache;
                  # include  /www/nconf/fcache;
                  # fastcgi_cache_valid 404 502 503 5m;
                  # fastcgi_cache_valid 200 301 302 10h;

            }


            location ^~ /wp-json/ {

                  # if ($cookie_admin_token = "") {
                  # return 403;
                  # }

                  limit_req zone=flood burst=5 nodelay;

                  limit_except GET HEAD POST OPTIONS { deny all; }
                  fastcgi_param SCRIPT_FILENAME $document_root/index.php;
                  include  /www/nconf/fcgi;
            }

            location ~ \.php$ {
                  return 444;
            }

      }


}