server {

	root /var/www/e-tdr.com/e-tdr;
        index index.php index.html index.htm index.nginx-debian.html;

        server_name e-tdr.com;

        location / {
                try_files $uri $uri/ /index.php?$args;
        }

	location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
	}
	
	location ~ /\.ht {
        deny all;
	}
	
	location ~ /\.git {
	deny all;
	}

	location ~*  \.(jpg|jpeg|png|gif|svg|ico|css|js)$ {
	expires 7d;
	}

	location ~*  \.(pdf)$ {
	expires 7d;
	}

	location /wordpress/ {
	try_files $uri $uri/ @wordpress;
	}
	
	location ~* \.(jpg|jpeg|png|gif|ico|svg|webp)$ {
        expires 1y;
        add_header Cache-Control "public, immutable, max-age=31536000";
    }
	location ~* \.(woff|woff2|ttf|eot|otf)$ {
        expires 1y;
        add_header Cache-Control "public, immutable, max-age=31536000";
        add_header Access-Control-Allow-Origin "*";
        access_log off;
    }

	location @wordpress {
	rewrite /wordpress/ /wordpress/index.php?$args;
	}

	location ^/wordpress/index.php(/.*)?$ {
		fastcgi_split_path_info ^(/wordpress/index.php)(/.*)$;
		fastcgi_pass unix:/run/php/php7.4-fpm.sock;
		fastcgi_index  index.php;
    }








    listen [::]:443 ssl; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/e-tdr.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/e-tdr.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
    if ($host = e-tdr.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot



	listen 80;
        listen [::]:80;

        server_name e-tdr.com;
    return 404; # managed by Certbot


}