server {
	listen 80;
	listen [::]:80;
	server_name site.ru;
	return 301 https://site.ru:443$request_uri;
}

server {
	listen 443 ssl http2;
	listen [::]:443 ssl http2;
	server_name site.ru;
	server_name_in_redirect off;
	
	access_log /var/log/nginx/localhost.access_log;
	error_log /var/log/nginx/localhost.error_log info;

	root /var/www/site.ru;

	index index.php index.html index.htm default.html default.htm;
	
	# Support Clean (aka Search Engine Friendly) URLs
	location / {
	try_files $uri $uri/ /index.php?$args;
	}
	#location ~ (\.html|/)$ {
	#try_files $uri /index.php?$args;
	#}
	
	# add global x-content-type-options header
	add_header X-Content-Type-Options nosniff;
	
	# deny running scripts inside writable directories
	location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
	return 403;
	error_page 403 /403_error.html;
	}
	
	#location ~ \.php$ {
	#fastcgi_pass  unix:/var/run/php/php7.4-fpm.sock;
	#fastcgi_index index.php;
	#include fastcgi_params;
	#fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
	#include /etc/nginx/fastcgi.conf;
	#}
	
	# caching of files 
	location ~* \.(ico|pdf|flv)$ {
	expires 1y;
	}

	location ~* \.(js|css|png|jpg|jpeg|gif|swf|xml|txt)$ {
	expires 14d;
	}

#	location / {
#	try_files $uri $uri/ =404;
#	}

	location ~ /\.ht {
	deny all;
	}

	location ~ /\.git {
	deny all;
	}

####
	location ~ \.php$ {
	include snippets/fastcgi-php.conf;
	# With php-fpm (or other unix sockets):
	fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
	}
####

}