# Replace hostname, certificate paths, app path and PHP socket.
server {
    listen 80;
    server_name assessment.example.org;
    return 301 https://$host$request_uri;
}
server {
    listen 443 ssl;
    server_name assessment.example.org;
    ssl_certificate /etc/letsencrypt/live/assessment.example.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/assessment.example.org/privkey.pem;
    root /var/www/jhasi-assessment/public;
    index index.php;
    autoindex off;
    client_max_body_size 25m;
    location / { try_files $uri $uri/ =404; }
    location ~ /\. { deny all; }
    location ~ \.php$ {
        try_files $uri =404;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param HTTPS on;
        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
        fastcgi_read_timeout 95s;
    }
}