# Adapt socket, hostname and path. Test nginx -t before reload. Terminate TLS on this host.
server {
 listen 443 ssl;
 server_name hotel.example.com;
 ssl_certificate /etc/ssl/hotel/fullchain.pem;
 ssl_certificate_key /etc/ssl/hotel/privkey.pem;
 root /srv/oviq/current/public;
 index index.php;
 client_max_body_size 8m;
 add_header X-Content-Type-Options nosniff always;
 location / { try_files $uri $uri/ /index.php?$query_string; }
 location ^~ /installer/ { deny all; } # Remove only for IP-restricted initial setup.
 location ~ /\. { deny all; }
 location ~ \.php$ {
  try_files $uri =404;
  include fastcgi_params;
  fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  fastcgi_pass unix:/run/php/php8.3-fpm.sock;
 }
}