server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    aio threads;

    ssl_certificate /root/.acme.sh/mertcangokgoz.com/mertcangokgoz.com.cer;
    ssl_certificate_key /root/.acme.sh/mertcangokgoz.com/mertcangokgoz.com.key;
    ssl_trusted_certificate /root/.acme.sh/mertcangokgoz.com/fullchain.cer;

    server_name a.mertcangokgoz.com;
    set $base /home/mertcan/mertcangokgoz.com;
    root $base/piwik;

    index index.php;
    
    location ~ ^/(index|matomo|piwik|js/index|plugins/HeatmapSessionRecording/configs)\.php {
        fastcgi_param HTTP_PROXY "";
        include configs/php_fastcgi.conf;
    }

    location ~* ^.+\.php$ {
        deny all;
        return 403;
    }

    location / {
        try_files $uri $uri/ =404;
    }

    location ~ /(config|tmp|core|lang) {
        deny all;
        return 403;
    }

    location ~ /\.ht {
        deny  all;
        return 403;
    }

    location ~ js/container_.*_preview\.js$ {
        expires off;
        add_header Cache-Control 'private, no-cache, no-store';
    }

    location ~ \.(gif|ico|jpg|png|svg|js|css|htm|html|mp3|mp4|wav|ogg|avi|ttf|eot|woff|woff2|json)$ {
        allow all;
        expires 1h;
        add_header Pragma public;
        add_header Cache-Control "public";
    }

    location ~ /(libs|vendor|plugins|misc/user) {
        deny all;
        return 403;
    }

    location ~/(.*\.md|LEGALNOTICE|LICENSE) {
        default_type text/plain;
    }

}