#server {
#    listen 80;
#    listen [::]:80;
#    server_name niver.4.niv.re;
#    return 301 https://niver.4.niv.re$request_uri;
#}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name niver.4.niv.re;

    root /var/www/niver;
    index index.php index.html index.htm;
    try_files $uri $uri/ @extensionless-php;

    include inc/tls.conf;
    include inc/errors.conf;

    error_log /var/log/nginx/niver.4.niv.re-error.log info;
    access_log /var/log/nginx/niver.4.niv.re-access.log tls;

    more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self'; frame-ancestors 'none';";

    location ~ ^/motrig/(db|less|lessphp|inc|niver.log) {
    	return 403;
    }

    location ~ \.inc.php$ {
    	return 403;
    }

    location ~ \.php$ {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass unix:/var/run/php/niver.sock;
        #fastcgi_index index.php;
        include inc/fastcgi.conf;
        try_files $uri =404;
    }

    location @extensionless-php {
        rewrite ^(.*)$ $1.php last;
    }

    ssl_certificate /etc/letsencrypt/live/niver.4.niv.re/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/niver.4.niv.re/privkey.pem;
}