include sites-available/rockethouse.rktstaging.com/before/*; # Managed by SpinupWP

server {
    listen 443 ssl http2; # Managed by SpinupWP
    listen [::]:443 ssl http2; # Managed by SpinupWP

    server_name rockethouse.rktstaging.com; # Managed by SpinupWP

    ssl_certificate /etc/letsencrypt/live/rockethouse.rktstaging.com/fullchain.pem; # Managed by SpinupWP
    ssl_certificate_key /etc/letsencrypt/live/rockethouse.rktstaging.com/privkey.pem; # Managed by SpinupWP

    root /sites/rockethouse.rktstaging.com/files/;

    index index.html index.php;

    access_log /sites/rockethouse.rktstaging.com/logs/access.log;
    error_log /sites/rockethouse.rktstaging.com/logs/error.log;

    # Don't allow pages to be rendered in an iframe on external domains.
    add_header X-Frame-Options "SAMEORIGIN";

    # MIME sniffing prevention
    add_header X-Content-Type-Options "nosniff";

    # Enable cross-site scripting filter in supported browsers.
    add_header X-Xss-Protection "1; mode=block";

    include sites-available/rockethouse.rktstaging.com/server/*; # Managed by SpinupWP

    # Prevent access to hidden files
    location ~* /\.(?!well-known\/) {
        deny all;
    }

    # Prevent access to certain file extensions
    location ~\.(ini|log|conf)$ {
        deny all;
    }

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ \.php$ {
        try_files $uri =404;

        include fastcgi.conf;
        fastcgi_pass unix:/run/php/php7.3-rockethouse.sock;

        include sites-available/rockethouse.rktstaging.com/location/*; # Managed by SpinupWP
    }
}

include sites-available/rockethouse.rktstaging.com/after/*; # Managed by SpinupWP