example.wordpress.nginx.virtualhost.conf

upstream examplecombackend {
        server unix:/var/run/php-fcgi-examplecom.sock;
}

server {
        listen 80 default;
        server_name example.com;
        return 301 https://example.com$request_uri;
}
server {
        listen 80;
        server_name www.example.com;
        return 301 https://example.com$request_uri;
}
server {
        listen 443 ssl;
        server_name www.example.com;
        return 301 https://example.com$request_uri;
        ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
}
server {
        listen 443 ssl default;
        server_name example.com;
        ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
        root /home/example.com/public_html;
        index index.php;

        access_log /home/examplecom/logs/access.log;
        error_log /home/examplecom/logs/error.log;

        location / {
                include /home/examplecom/public_html/nginx.conf;
                add_header X-Cache-Status $upstream_cache_status;
                try_files $uri $uri/ /index.php?$args;
        }

        location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
                expires 24h;
                log_not_found off;
        }

        location ^~ /.well-known {
                try_files $uri $uri/ @handler;
                index index.php index.html;
        }
        location /. {
                return 404;
        }
        location @handler {
                rewrite ^/(.*)$ /index.php;
        }

        location ~ ^/wp-(admin|login).php {
                location ~ \.php$ {
                        # Setup caching
                set $no_cache "";
                # Don't cache POSTs
                if ($request_method = POST) {
                        set $no_cache 1;
                }

                # Don’t cache uris containing the following segments
                if ($request_uri ~* "/wp-admin/|/xmlrpc.php|wp-.*.php|/feed/|index.php|sitemap(_index)?.xml") {
                        set $no_cache 1;
                }

                # Don’t use the cache for logged in users or recent commenters
                if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass|wordpress_no_cache|wordpress_logged_in") {
                        set $no_cache 1;
                }

                fastcgi_no_cache $no_cache;
                fastcgi_cache_bypass $no_cache;
                fastcgi_cache drm_custom_cache;
                fastcgi_cache_key $server_name|$request_uri;
                # Cache times
                fastcgi_cache_valid 404 60m;
                fastcgi_cache_valid 200 60m;
                fastcgi_max_temp_file_size 4m;
                fastcgi_cache_use_stale updating;
                fastcgi_pass_header Set-Cookie;
                fastcgi_pass_header Cookie;
                fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
                        fastcgi_intercept_errors on;
                        fastcgi_pass welcometotravelbackend;
                        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
                        include        fastcgi_params;
                }
        }

        location ~ \.php$ {
                # Setup caching
                set $no_cache "";
                # Don't cache POSTs
                if ($request_method = POST) {
                        set $no_cache 1;
                }

                # Don’t cache uris containing the following segments
                if ($request_uri ~* "/wp-admin/|/xmlrpc.php|wp-.*.php|/feed/|index.php|sitemap(_index)?.xml") {
                        set $no_cache 1;
                }

                # Don’t use the cache for logged in users or recent commenters
                if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass|wordpress_no_cache|wordpress_logged_in") {
                        $no_cache 1;
                }       

                fastcgi_no_cache $no_cache;
                fastcgi_cache_bypass $no_cache;
                fastcgi_cache drm_custom_cache;
                fastcgi_cache_key $server_name|$request_uri;
                # Cache times
                fastcgi_cache_valid 404 60m;
                fastcgi_cache_valid 200 60m;
                fastcgi_max_temp_file_size 4m;
                fastcgi_cache_use_stale updating;
                fastcgi_pass_header Set-Cookie;
                fastcgi_pass_header Cookie;
                fastcgi_ignore_headers Cache-Control Expires Set-Cookie;
                fastcgi_index index.php;
                fastcgi_intercept_errors on;
                fastcgi_pass examplecombackend;
                fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
                include        fastcgi_params;
        }
        
        # Caching
        location ~* \.(ico|jpg|webp|jpeg|gif|css|png|js|ico|bmp|zip|woff)$ {
                access_log off;
                log_not_found off;
                add_header Pragma public;
                add_header Cache-Control "public";
                expires 14d;
        }


        location ~* \.(php|html)$ {
                access_log on;
                log_not_found on;
                add_header Pragma public;
                add_header Cache-Control "public";
                expires 14d;
        }

        # SECURITY
        # Ignore other host headers
        if ($host !~* ^(example.com|www.example.com)$ ) {
                return 444;
        }
        # Obfuscation rule (hide identifying files)
        location ~ /(\.|wp-config.php|readme.html|licence.txt) {
                return 404;
        }
        # Only allow GET , POST, and HEAD
        if ($request_method !~ ^(GET|POST|HEAD)$ ) {
                return 444;
        }
        # Disable viewing of hidden files (files starting with a dot)
        location ~ /\. {
                deny  all;
        }
}