server { listen 443 ssl; server_name rss.natalieandjoshua.com; root /var/www/html; index index.php index.html index.htm; ssl_certificate /etc/dehydrated/certs/rss.natalieandjoshua.com/fullchain.pem; ssl_certificate_key /etc/dehydrated/certs/rss.natalieandjoshua.com/privkey.pem; ssl_protocols TLSv1.2 TLSv1 TLSv1.1; location ~ ^.*/(?P[^/]+\.(mp3))$ { add_header Content-Disposition 'attachment; filename="$request_basename"'; } error_log /var/log/nginx/rss.error; access_log /var/log/nginx/rss.access; location / { try_files $uri $uri/ /index.php =404; } autoindex off; index pihole/index.php index.php index.html index.htm; location /*.js { index pihole/index.js; auth_basic "Restricted"; #For Basic Auth auth_basic_user_file /etc/nginx/.htpasswd; #For Basic Auth } location /admin { root /var/www/html; index index.php index.html index.htm; auth_basic "Restricted"; #For Basic Auth auth_basic_user_file /etc/nginx/.htpasswd; #For Basic Auth } location ~ /\.ht { deny all; } location ~* \.php$ { fastcgi_split_path_info ^(.+\.php)(/.+)$; include fastcgi_params; fastcgi_pass unix:/run/php/php7.3-fpm.sock; fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_buffer_size 16k; fastcgi_buffers 4 16k; } }