server {
    listen 80;
    listen [::]:80;
    server_name www.domain.com domain.com;
    return 301 https://domain.com$request_uri;
}
server {

    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name domain.com;
       ssl_certificate ssl/xxx.pem;
    ssl_certificate_key ssl/xxx.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';

    root /var/www/domain.com/htdocs;
    index index.php index.html index.htm;
    include /etc/nginx/bots.d/ddos.conf;
    include /etc/nginx/bots.d/blockbots.conf;

include common/wpfc-php73.conf;
include rocket-nginx/default.conf;

    include common/locations-wo.conf;
    include /var/www/domain.com/conf/nginx/*.conf;


    ##
    # Nginx Bad Bot Blocker Includes
    # REPO: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker
    ##



}