server{ listen 443 ssl http2; server_name www.X.Y X.Y; ssl on; ssl_certificate /etc/letsencrypt/live/X.Y/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/X.Y/privkey.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; ssl_ecdh_curve secp384r1; root /var/www/uguu/dist/; autoindex off; access_log off; index index.html index.php; etag on; location ~* \.(css|js|jpg|jpeg|gif|png|ico|xml|eot|woff|woff2|ttf|svg|otf|x-icon|avif|webp|apng|min.js|min.css)$ { add_header Cache-Control "public"; expires 30d; } gzip on; gzip_min_length 1000; gzip_comp_level 6; gzip_proxied any; gzip_types text/css text/js text/javascript application/javascript application/x-javascript; location ~* \.php$ { fastcgi_pass unix:/var/run/php/php7.3-fpm.sock; fastcgi_intercept_errors on; fastcgi_index index.php; fastcgi_split_path_info ^(.+\.php)(.*)$; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; } }