nginx-site

# HTTPS Server
server {
	listen 80;
	server_name ritsicrossing.ritsi.es;
	return 301 https://ritsicrossing.ritsi.es$request_uri;
}


server {
	listen 443 ssl http2;
	server_name ritsicrossing.ritsi.es;

	root /var/www/ritsi_crossing;
	index index.php;
	access_log /var/log/nginx/ritsicrossing.ritsi.es_access.log;
	error_log /var/log/nginx/ritsicrossing.ritsi.es_error.log;

	include /etc/nginx/snippets/letsencrypt-certificates.conf;

	location ~ /\.(?!well-known).* {
		deny all;
		access_log off;
		log_not_found off;
		return 404;
	}

	location ~\.(sql|json) {
			deny all;
			access_log off;
			log_not_found off;
			return 404;
	}
	
	location ~*/management/index.php {
		auth_basic "Management area";
		auth_basic_user_file /var/www/ritsi_crossing/management/.htpasswd;
		fastcgi_pass unix:/run/php/php7.4-fpm.sock;
		include         fastcgi_params;
		fastcgi_param   SCRIPT_FILENAME    $document_root$fastcgi_script_name;
		fastcgi_param   SCRIPT_NAME        $fastcgi_script_name;
	}

	location ~* \.php$ {
		fastcgi_pass unix:/run/php/php7.4-fpm.sock;
		include         fastcgi_params;
		fastcgi_param   SCRIPT_FILENAME    $document_root$fastcgi_script_name;
		fastcgi_param   SCRIPT_NAME        $fastcgi_script_name;
	}
}