#---------- HOMESHOW-VIETNAM.VN ---------------#
server  {
	server_name vn.homeshow-vietnam.com;
	#access_log off;
    #error_log off;
    root /home/eims/vn.homeshow-vietnam.com;
    index index.php;
	
	set $skip_cache 0;

    # POST requests and URLs with a query string should always go to PHP
    if ($request_method = POST) {
        set $skip_cache 1;
    }   

    if ($query_string != "") {
        set $skip_cache 1;
    }   

    # Don't cache URIs containing the following segments
    if ($request_uri ~* "/wp-admin/|/xmlrpc.php|wp-.*.php|/feed/|index.php|sitemap(_index)?.xml") {
        set $skip_cache 1;
    }   

    
 
    location / {
        try_files $uri $uri/ /index.php?$args ;
    }
	
	
	location ~ .php$ {

	## WP Defender - Prevent PHP Execution ##

# Stop php access except to needed files in wp-includes
location ~* ^/wp-includes/.*(?<!(js/tinymce/wp-tinymce))\.php$ {
  internal; #internal allows ms-files.php rewrite in multisite to work
}

# Specifically locks down upload directories in case full wp-content rule below is skipped
location ~* /(?:uploads|files)/.*\.php$ {
  deny all;
}

# Deny direct access to .php files in the /wp-content/ directory (including sub-folders).
# Note this can break some poorly coded plugins/themes, replace the plugin or remove this block if it causes trouble
location ~* ^/wp-content/.*\.php$ {
  deny all;
}

## WP Defender - End ##

    # Don't use the cache for logged-in users or recent commenters
    if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass|wordpress_no_cache|wordpress_logged_in") {
        set $skip_cache 1;
    }

	#fastcgi_cache_bypass $skip_cache;
        #fastcgi_no_cache $skip_cache;
	#fastcgi_cache_key "$scheme$request_method$host$request_uri";
        #fastcgi_cache HOMESHOWVIETNAM;
        #fastcgi_cache_valid  100m;
		
	fastcgi_pass   php-fpm;
        fastcgi_index  index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include        fastcgi_params;
	client_body_timeout 5s;
	fastcgi_connect_timeout 60;
	fastcgi_send_timeout 3m;
	fastcgi_read_timeout 3m;
        client_max_body_size 100m;
	fastcgi_buffer_size 48k;
	fastcgi_buffers 256 4k;
	fastcgi_busy_buffers_size 256k;
	fastcgi_temp_file_write_size 256k;
	fastcgi_intercept_errors on;
    }

	location ~* \.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|css|rss|atom|js|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtfg)$ {
        expires max;
        log_not_found off;
    }
	
    location = /robots.txt {
        access_log off;
        log_not_found off;
    }


    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/vn.homeshow-vietnam.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/vn.homeshow-vietnam.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server  {
    if ($host = vn.homeshow-vietnam.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


	server_name vn.homeshow-vietnam.com;


    listen 80;
    return 404; # managed by Certbot


}