server {
    listen 80;
    server_name retrohier.com www.retrohier.com;
    return 301 https://www.retrohier.com$request_uri;
}

server {
    listen 443 ssl;
    server_name retrohier.com;
    ssl_certificate /etc/letsencrypt/live/retrohier.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/retrohier.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
    return 301 https://www.retrohier.com$request_uri;
}

server {
    listen 443 ssl;
    server_name www.retrohier.com;
    root /var/www/retrohier.com;
    index index.php index.html;
    client_max_body_size 128M;

    ssl_certificate /etc/letsencrypt/live/retrohier.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/retrohier.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

    # BEGIN Native WebP fallback
    set $ext_webp ".webp";
    if ($http_accept !~* "image/webp") {
        set $ext_webp "";
    }

    location ~* ^/wp-content/(?<path>.+)\.(?<ext>jpe?g|png|gif|webp)$ {
        add_header Vary Accept;
        add_header Cache-Control "private";
        expires 365d;
        try_files
            /wp-content/$path$ext_webp
            $uri =404;
    }
    # END Native WebP fallback

    include snippets/perf.conf;
    include snippets/wp-security.conf;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
        fastcgi_read_timeout 300;
    }
}