server { listen 80; listen [::]:80; server_name heatmap.zcu.cz www.heatmap.zcu.cz; location ~ /.well-known { allow all; root /var/www/symfony/public; } # Redirect all HTTP requests to HTTPS with a 301 Moved Permanently response. return 301 https://$server_name$request_uri; } server { listen 443 ssl; listen [::]:443 ssl; server_name www.heatmap.zcu.cz; ssl_certificate /root/.acme.sh/heatmap.zcu.cz/fullchain.cer; ssl_certificate_key /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; return 301 https://heatmap.zcu.cz$request_uri; } server { listen 443 ssl; listen [::]:443 ssl; server_name heatmap.zcu.cz; ssl_certificate /root/.acme.sh/heatmap.zcu.cz/fullchain.cer; ssl_certificate_key /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; root /var/www/symfony/public; index index.php index.html index.htm; location / { try_files $uri $uri/ /index.php$is_args$args; } location ~ \.php$ { try_files $uri /index.php =404; fastcgi_pass php-upstream; fastcgi_index index.php; fastcgi_buffers 16 16k; fastcgi_buffer_size 32k; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_read_timeout 600; include fastcgi_params; } location ~ /\.ht { deny all; } location ~ /.well-known { allow all; root /var/www/symfony/public; } }