server {
  listen 443 ssl; # managed by Certbot
  listen [::]:443 ssl ipv6only=on; # managed by Certbot

  root /var/www/BtPayments/BtPayments-platform/public;
  server_name portal.btpayments.io;
  server_name admin.btpayments.io;

  access_log /var/log/nginx/BtPayments-platform.access.log;
  error_log  /var/log/nginx/BtPayments-platform.error.log;

  ssl_certificate /etc/letsencrypt/live/portal.btpayments.io/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/letsencrypt/live/portal.btpayments.io/privkey.pem; # managed by Certbot
  include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
  ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

  add_header X-Frame-Options "SAMEORIGIN";
  add_header X-Content-Type-Options "nosniff";

  index index.php index.html;
  charset utf-8;

  error_page 404 /index.php;

  location = /favicon.ico { access_log off; log_not_found off; }
  location = /robots.txt  { access_log off; log_not_found off; }

  location / {
    try_files $uri $uri/ /index.php?$query_string;
  }

  location ~ \.php$ {
    include snippets/fastcgi-php.conf;
    fastcgi_pass unix:/run/php/php8.3-fpm.sock;
    fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
    include fastcgi_params;
    fastcgi_hide_header X-Powered-By;
  }

  location ~ /\.(?!well-known).* {
    deny all;
  }
}


server {
  listen 80;
  listen [::]:80;

  server_name portal.btpayments.io;
  server_name admin.btpayments.io;

  return 301 https://$host$request_uri;
}