server {
    listen 80 default_server;
    listen [::]:80 default_server;

    # TLS
    # this configuration works if the key is not encrypted, if it is encrypted, you need an additional keyfile
    # listen [::]:443 ssl ipv6only=on default;
    # listen *:443 default ssl;
    # ssl_certificate_key /path/to/key.pem;
    # ssl_certificate /path/to/fullchain.pem;
    # ssl_protocols TLSv1.2 TLSv1.3;
    # generate that file with openssl dhparam -out xxx.pem 4096
    # ssl_dhparam /path/to/dhparam.pem;

    # enable H2 - makes connections faster, also allows server push; needs TLS to work
    http2 on;

    # it assumes that Wavelog is installed in /var/www/html. Change accordingly
    root /var/www/html;

    index index.php index.html;

    server_name wavelog.example.com _;
    server_tokens off;

    # index.php fallback
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    # deny access to hidden files
    location ~ /\. {
        deny all;
        return 403;
    }

    # deny access to application/
    location ~ /application {
        deny all;
        return 403;
    }

    # favicon.ico
    location = /favicon.ico {
        log_not_found off;
    }

    # robots.txt
    location = /robots.txt {
        log_not_found off;
    }

    # assets
    location ~* \.(?:css(\.map)?|js(\.map)?|jpe?g|png|gif|ico|cur|heic|webp|tiff?|mp3|m4a|aac|ogg|midi?|wav|mp4|mov|webm|mpe?g|avi|ogv|flv|wmv)$ {
        expires 7d;
    }

    # svg, fonts
    location ~* \.(?:svgz?|ttf|ttc|otf|eot|woff2?)$ {
        add_header Access-Control-Allow-Origin "*";
        expires 7d;
    }

    ## gzip (optional)
    # gzip            on;
    # gzip_vary       on;
    # gzip_proxied    any;
    # gzip_comp_level 6;
    # gzip_types      text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml;

    # handle .php
    location ~ \.php(/|$) {
        # on arch linux, the default path is /run/php-fpm/php-fpm.sock
        fastcgi_pass unix:/var/run/php/php-fpm.sock;

        # 404
        try_files $fastcgi_script_name =404;

        # default fastcgi_params
        include fastcgi_params;

        # fastcgi settings
        fastcgi_index index.php;
        fastcgi_buffers 8 16k;
        fastcgi_buffer_size 32k;

        # fastcgi params
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        fastcgi_param DOCUMENT_ROOT $realpath_root;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $fastcgi_path_info;
    }
}