# Starz ERP – Nginx Virtual Host
# Domain:    starzerp.fi / www.starzerp.fi
# Deploy to: /etc/nginx/sites-available/starzerp
# Symlink:   /etc/nginx/sites-enabled/starzerp

server {
    server_name starzerp.fi www.starzerp.fi;
    root /var/www/starzerp/public;

    location / {
        try_files $uri /index.php$is_args$args;
    }

    location ~ ^/index\.php(/|$) {
        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        fastcgi_param DOCUMENT_ROOT $realpath_root;
        fastcgi_buffer_size 128k;
        fastcgi_buffers 4 256k;
        fastcgi_busy_buffers_size 256k;
        internal;
    }

    # Block direct access to any other .php files
    location ~ \.php$ {
        return 404;
    }

    error_log /var/log/nginx/starzerp_error.log;
    access_log /var/log/nginx/starzerp_access.log;
    client_max_body_size 20M;

    # SSL will be added by Certbot automatically
    listen 80;
    listen [::]:80;
}