| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980 | 
							- # Expires map
 
- map $sent_http_content_type $expires {
 
-     default                    off;
 
-     text/html                  epoch;
 
-     text/css                   max;
 
-     application/javascript     max;
 
-     ~image/                    max;
 
- }
 
- server {
 
- 	listen		80;
 
- 	listen		[::]:80;
 
- 	server_name	${SERVICE_DOMAIN};
 
- 	return 301	https://$http_host$request_uri;
 
- 	add_header X-Content-Type-Options "nosniff" always;
 
- 	add_header X-XSS-Protection "1; mode=block" always;
 
- 	add_header X-Frame-Options "DENY" always;
 
- 	add_header Referrer-Policy "strict-origin" always;
 
- 	add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
 
- 	server_tokens off;
 
- 	}
 
- server {
 
- 	server_name	${SERVICE_DOMAIN};
 
- 	root /var/www/html/${SERVICE_DOMAIN};
 
-         index index.html index.htm;
 
- 	listen 443 ssl;
 
- #	listen [::]:443 ipv6only=on  ssl;
 
- 	ssl_certificate /etc/nginx/ssl/${SERVICE_DOMAIN}/cert.pem;
 
- 	ssl_certificate_key /etc/nginx/ssl/${SERVICE_DOMAIN}/key.pem;
 
- 	include /etc/nginx/includes/ssl.conf;
 
- 	add_header X-Content-Type-Options "nosniff" always;
 
- 	add_header X-XSS-Protection "1; mode=block" always;
 
- 	add_header X-Frame-Options "DENY" always;
 
- 	add_header Referrer-Policy "strict-origin" always;
 
- 	add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
 
- 	server_tokens off;
 
- 	include /etc/nginx/includes/gzip.conf;
 
- 	location / {
 
-                 #try_files $uri $uri/ =404;
 
-                 try_files $uri $uri/ /index.php?q=$uri&$args;
 
-         }
 
- 	expires $expires;
 
- 	location ~* \.(js|css|xml|gz)$ {
 
-     		add_header Vary "Accept-Encoding";
 
- 	}
 
- 	
 
- 	# custom error pages
 
- 	fastcgi_intercept_errors on; # make custom errors work
 
- 	
 
- 	error_page   500 502 503 504  /errors/50x.html;
 
- 	location = /50x.html {
 
- 		root   /var/www/errors;
 
- 	}
 
- 	error_page   403   /errors/403.html;
 
- 	location = /403.html {
 
- 		root   /var/www/errors;
 
- 	}
 
- 	error_page   404   /errors/404.html;
 
- 		location = /404.html {
 
- 	}
 
- 	location ^~ /.well-known/ {
 
- 	    access_log           off;
 
- 	    log_not_found        off;
 
- 	    root                 /var/www/html;
 
- #	    autoindex            off;
 
- 	    index                index.html; # "no-such-file.txt",if expected protos don't need it
 
- 	    try_files            $uri $uri/ =404;
 
- 	}
 
- }
 
 
  |