webhooks.denhac.org.nginx.conf

server {

        root /var/www/html/public;

        index index.php index.html index.htm index.nginx-debian.html;

        server_name webhooks.denhac.org;

        ssl_client_certificate /etc/ssl/certs/DigiCert_Global_Root_CA.pem;
        ssl_verify_client optional;
        ssl_verify_depth 2;

        location / {
                try_files $uri $uri/ /index.php?$query_string;
        }

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;

		fastcgi_pass unix:/var/run/php/php8.0-fpm.sock;
                fastcgi_param X_CLIENT_CERTIFICATE $ssl_client_escaped_cert;
		fastcgi_param X_CLIENT_VERIFY $ssl_client_verify;
        }

        location ~ /\.ht {
                deny all;
        }

    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/webhooks.denhac.org/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/webhooks.denhac.org/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
    if ($host = webhooks.denhac.org) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


        listen 80 default_server;
	listen [::]:80 default_server;

        server_name webhooks.denhac.org;
    return 404; # managed by Certbot


}