server {
       server_name debian-guest.lan;
       listen 443 ssl;
       root /var/www/mediawiki/;
       ssl_verify_client off;
       ssl_ciphers 'AES128+EECDH:AES128+EDH:!aNULL';
       ssl_protocols TLSv1.2;
       ssl_prefer_server_ciphers on;
       ssl_certificate debian-guest.crt;
       ssl_certificate_key debian-guest.key;
       ssl_client_certificate /etc/nginx/ssl/ca/rootCAs.txt;
       add_header X-Content-Type-Options nosniff;
       add_header Access-Control-Allow-Origin *;
       add_header Access-Control-Allow-Headers *;
       disable_symlinks off;
       userid on;
       rewrite_log on;
       error_log /var/log/nginx/error.log;
       proxy_max_temp_file_size 0;
       proxy_buffering off;
       proxy_buffer_size   128k;
       proxy_buffers     4 256k;
       proxy_busy_buffers_size 256k;
       location / {
       		index index.html index.htm index.php;
       }
       location ~ \.php$ {
                include fastcgi_params;
                fastcgi_pass unix:/run/php/php7.3-fpm.sock;
		fastcgi_index index.php;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
       }
       location /rest.php {
       	     try_files $uri $uri/ /rest.php?$args;
       }
}