{
	# debug
	# default_sni yourhostnamehere
}

yourhostnamehere {
	root * /usr/local/www/wordpress
	encode gzip
	file_server

	log {
		output file /var/log/yourhostnamehere.log
	}

	php_fastcgi 127.0.0.1:9000 {
		env front_controller_active true
	}

	tls /usr/local/etc/pki/tls/certs/fullchain.pem /usr/local/etc/pki/tls/private/privkey.pem

	@forbidden {
        	not path /wp-includes/ms-files.php
        	path /xmlrpc.php
		path *.sql
		path /wp-content/uploads/*.php
		path /wp-content/debug.log
		path /wp-admin/includes/*.php
		path /wp-includes/*.php
		path /wp-config.php
		path /.user.ini
	}
	respond @forbidden 403
}