Nginx Config for ttrss (Tiny Tiny RSS)

ttrss

server {
        listen 80;
        listen [::]:80; 
        server_name reader.example.xyz;
        return 301 https://$server_name$request_uri;
}

server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name reader.example.xyz;

        add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";

# SSL Settings
        ssl on;
        ssl_certificate /etc/letsencrypt/live/reader.example.xyz/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/reader.example.xyz/privkey.pem;

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers 'AES256+EECDH:AES256+EDH';
        ssl_prefer_server_ciphers on;
        ssl_session_cache shared:SSL:10m;
        ssl_session_timeout 1h;
        ssl_dhparam /etc/nginx/dhparam.pem;

        ssl_stapling on;
        ssl_stapling_verify on;

        resolver 8.8.4.4 8.8.8.8;

location  / {
             index index.php;
             try_files $uri $uri/ =404;
        }


    root /var/www/ttrss;

    access_log /var/log/nginx/ttrss_access.log;
    error_log /var/log/nginx/ttrss_error.log info;

location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass 127.0.0.1:9000;
        }
}