server {
    server_name neoblako.foach.site;
    root /var/www/neoblako.ru;

    index index.php;
    client_max_body_size 20M;

    charset utf-8;

    location / {
#	auth_basic "Unauthorized";
#        auth_basic_user_file /var/www/.htpasswd;

        root /var/www/neoblako.ru;
        try_files $uri $uri/ /index.php?$args;
    }

    # WebP Express rules
    # --------------------
    location ~* ^/?wp-content/.*\.(png|jpe?g)$ {
        add_header Vary Accept;
        expires 365d;
        if ($http_accept !~* "webp"){
            break;
        }
        try_files
            /wp-content/webp-express/webp-images/doc-root/$uri.webp
            $uri.webp
            /wp-content/plugins/webp-express/wod/webp-on-demand.php?xsource=x$request_filename&wp-content=wp-content
        ;
    }

    # Route requests for non-existing webps to the converter
    location ~* ^/?wp-content/.*\.(png|jpe?g)\.webp$ {
        try_files
            $uri
            /wp-content/plugins/webp-express/wod/webp-realizer.php?xdestination=x$request_filename&wp-content=wp-content
        ;
    }
    # ------------------- (WebP Express rules ends here)

    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
	fastcgi_pass unix:/run/php/php8.0-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        fastcgi_param APPLICATION_ENV test;
        fastcgi_read_timeout 240;
    }

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found off; }

    error_page 404 /404.html;

    location ~ /\.(?!well-known).* {
        deny all;
    }

    listen 80; # managed by Certbot

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/neoblako.foach.site/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/neoblako.foach.site/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}