server {
        listen *:80;
        listen [::]:80;
        listen *:443 ssl http2;

	ssl_protocols TLSv1.3 TLSv1.2;
        listen [::]:443 ssl http2;
        ssl_certificate /var/www/clients/client1/web17/ssl/seaside.pacim.de-le.crt;
        ssl_certificate_key /var/www/clients/client1/web17/ssl/seaside.pacim.de-le.key;

        server_name seaside.pacim.de;

        root   /var/www/seaside.pacim.de/web;
				disable_symlinks if_not_owner from=$document_root;

        if ($scheme != "https") {
            rewrite ^(?!/\.well-known/acme-challenge)/ https://$http_host$request_uri? permanent;
        }

        index index.html index.htm index.php index.cgi index.pl index.xhtml standard_index.html;



        error_log /var/log/ispconfig/httpd/seaside.pacim.de/error.log;
        access_log /var/log/ispconfig/httpd/seaside.pacim.de/access.log combined;

        location ~ /\. {
			deny all;
        }

        location ^~ /.well-known/acme-challenge/ {
			access_log off;
			log_not_found off;
			auth_basic off;
			root /usr/local/ispconfig/interface/acme/;
			autoindex off;
			index index.html;
			try_files $uri $uri/ =404;
        }

        location = /favicon.ico {
            log_not_found off;
            access_log off;
            expires max;
            add_header Cache-Control "public, must-revalidate, proxy-revalidate";
        }

        location = /robots.txt {
            allow all;
            log_not_found off;
            access_log off;
        }

        location /stats/ {

            index index.html index.php;
            auth_basic "Members Only";
            auth_basic_user_file /var/www/clients/client1/web17/web//stats/.htpasswd_stats;
            add_header Content-Security-Policy "default-src * 'self' 'unsafe-inline' 'unsafe-eval' data:;";
        }

        location ^~ /awstats-icon {
            alias /usr/share/awstats/icon;
        }

        location ~ \.php$ {
            try_files /25c1be21b9df50acde8ea0bf3cdc79f5.htm @php;
        }

        location @php {
            try_files $uri =404;
            include /etc/nginx/fastcgi_params;
            fastcgi_pass unix:/var/lib/php7.3-fpm/web17.sock;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            fastcgi_intercept_errors on;
        }




        client_max_body_size 512M;

        location ~* (\.ini|\.log|\.conf|\.sh|\.save|\.bak|\.pdf|\.xls|\.md|\.xlsx)$ {
             deny all;
             error_page 403 =404 / ;
        }

        location ~* ^/index\.php$ {
        	break;
        }
        if ($uri !~ "^/(assets)(/.*)?"){
        	set $rule_0 1$rule_0;
        }
        if (!-f $request_filename){
        	set $rule_0 2$rule_0;
        }
        if (!-d $request_filename){
        	set $rule_0 3$rule_0;
        }
        if ($rule_0 = "321"){
        	rewrite ^/(.*)/+?$ /index.php?getTemplate=$1 last;
        }

        location /time {
            auth_basic "Restricted Area";
            auth_basic_user_file /etc/nginx/.htpasswd_seaside;
            autoindex on;
        }

        location /processed {
            auth_basic "Restricted Area";
            auth_basic_user_file /etc/nginx/.htpasswd_seaside;
            autoindex on;
        }


        location /import/ {
                auth_basic "Members Only";
                auth_basic_user_file /var/www/clients/client1/web17/web/import/.htpasswd;

                location ~ \.php$ {
                    try_files /25c1be21b9df50acde8ea0bf3cdc79f5.htm @php;
                }
        }
}