server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name www.НАЗВАНИЕСАЙТА.ru НАЗВАНИЕСАЙТА.ru;
return 301 http://$host$request_uri;
}
server {
listen 80;
listen [::]:80;
root /var/www/НАЗВАНИЕСАЙТА/html;
index index.php index.html index.htm;
server_name www.НАЗВАНИЕСАЙТА.ru НАЗВАНИЕСАЙТА.ru;
location / {
proxy_pass
http://127.0.0.1:81$request_uri;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
try_files $uri $uri/ /index.php?$args;
}
location ~ /\.ht {
deny all;
}
location ~* \.(ico|docx|doc|xls|xlsx|rar|zip|jpg|jpeg|txt|pdf|gif|png|css|js|html)$ {
root /var/www/НАЗВАНИЕСАЙТА/html;
}
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
add_header Content-Security-Policy "block-all-mixed-content";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Content-Type-Options "nosniff";
resolver 8.8.8.8;
}