servnest-mkosi/mkosi.extra/etc/nginx/sites/default-server.conf

server {
	listen [::1]:42443 ssl http2 default_server;
	listen 127.0.0.1:42443 ssl http2 default_server;

	ssl_certificate /etc/ssl/certs/niver.crt;
	ssl_certificate_key /etc/ssl/private/niver.key;

	root /srv/niver/php/errors;
	try_files index.php index.html $uri $uri/;
	index index.php index.html;

	location / {
		root /srv/niver/php/errors;
		try_files /index.php =500;
		index index.php;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass unix:/run/php-fpm/niver.sock;
		include /etc/nginx/inc/fastcgi.conf;
	}

	include /etc/nginx/inc/tls.conf;
	include /etc/nginx/inc/errors.conf;

	more_set_headers "Content-Security-Policy : default-src 'none'; frame-ancestors 'none';";
}