# komentarz
server {
    listen 217.182.201.233:80;
    listen [2001:41d0:602:4e9::16]:80;
    server_name www.domain.tld;

    include rtm-redirects-dbs.conf;
    include rtm-redirects-mua.conf;

    location ~ ^/(?!\.well-known) {
        return 301 https://$server_name$request_uri;
    }

    root /var/www/htdocs/virtuals/www.domain.tld/data;
    index index.html;

    include codenix/014-acmele.conf;
    include codenix/000-cmsploit.conf;
    include codenix/000-security-txt.conf;
    include codenix/004-dot-ht.conf;
    include codenix/004-err-page-404.conf;
    include codenix/004-err-page-5xx.conf;
    include codenix/004-pillaging-dvcs.conf;
    include codenix/005-no-logging.conf;
    include codenix/005-x-frame.conf;
    include expires.conf;
}

server {
    listen 217.182.201.233:443 http2 ssl;
    listen [2001:41d0:602:4e9::16]:443 http2 ssl;
    server_name www.domain.tld;

    include codenix/005-x-robots-tag-all.conf;
    include codenix/005-x-headers-security.conf;

    location /.well-known/ {}

    include rtm-redirects-dbs.conf;
    include rtm-redirects-mua.conf;

    root /var/www/htdocs/virtuals/www.domain.tld/data;
    index index.html;

    include codenix/004-dot-ht.conf;
    include codenix/004-err-page-404.conf;
    include codenix/004-err-page-5xx.conf;
    include codenix/004-pillaging-dvcs.conf;
    include codenix/005-no-logging.conf;
    include codenix/005-x-frame.conf;
    include codenix/015-csp-report.conf;

    include expires.conf;
}