servnest-mkosi/mkosi.extra/etc/nginx/sites/niver.test.conf

server {
	listen [::1]:42443 ssl http2;
	listen 127.0.0.1:42443 ssl http2;
	server_name servnest.test;

	root /srv/servnest/core;

	include inc/tls.conf;
	include inc/errors.conf;

	more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self'; frame-ancestors 'none'; form-action 'self';";

	location / {
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass unix:/run/php-fpm/servnest.sock;
		include inc/fastcgi.conf;
		try_files /router.php =500;
	}

	location /css {
		alias /srv/servnest/core/css;
	}

	location /docs {
		alias /srv/servnest/docs;
	}

	ssl_certificate /etc/ssl/certs/servnest.crt;
	ssl_certificate_key /etc/ssl/private/servnest.key;
}