server {
    listen 80;
    server_name localhost.silkprint.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    # add_header X-Frame-Options "SAMEORIGIN" always;
    # add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    # add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    # add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    # add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    # add_header Cross-Origin-Resource-Policy "same-site" always;
    # add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    # Magento static assets: strip the /version<TS>/ signing prefix and fall back
    # to static.php (developer mode regenerates missing files on demand).
    location /static/ {
        location ~ ^/static/version\d+/ {
            rewrite ^/static/version\d+/(.*)$ /static/$1 last;
        }
        location ~* \.(?:ico|jpg|jpeg|png|gif|webp|avif|svg|svgz|bmp|woff|woff2|ttf|otf|eot|css|js|map|json|html|htm|xml|txt|pdf)$ {
            add_header Cache-Control "public";
            expires +1y;
            try_files $uri $uri/ /static.php?resource=$1;
        }
        if (!-f $request_filename) {
            rewrite ^/static/(.*)$ /static.php?resource=$1 last;
        }
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }

    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass php:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.apparel-demo1.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    # add_header X-Frame-Options "SAMEORIGIN" always;
    # add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    # add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    # add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    # add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    # add_header Cross-Origin-Resource-Policy "same-site" always;
    # add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location ~* ^/rest/ {
        if ($request_method = 'OPTIONS') {
            add_header 'Access-Control-Allow-Origin' 'http://localhost.apparel-demo.com' always;
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always;
            add_header 'Access-Control-Allow-Headers' 'Authorization, Content-Type, X-Requested-With, Cache-Control, Access-Control-Allow-Origin' always;
            add_header 'Access-Control-Allow-Credentials' 'true' always;
            return 204;
        }
        try_files $uri $uri/ /index.php?$query_string;
    }

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            add_header 'Access-Control-Allow-Origin' 'http://localhost.apparel-demo.com' always;
            add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always;
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }

    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location ~ \.php$ {
        add_header 'Access-Control-Allow-Origin' 'http://localhost.apparel-demo.com' always;
        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, DELETE' always;
        add_header 'Access-Control-Allow-Headers' 'Authorization, Content-Type, X-Requested-With, Cache-Control, Access-Control-Allow-Origin' always;
        add_header 'Access-Control-Allow-Credentials' 'true' always;
        include fastcgi_params;
        fastcgi_pass php:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.headless-marketplace-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 1024M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self' http://localhost.headless-marketplace-demo.com;" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        fastcgi_connect_timeout  3600s;
        fastcgi_send_timeout 36600s;
        fastcgi_read_timeout 3600s;
        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.headless-marketplace-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 1024M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self' http://localhost.headless-marketplace-demo.com;" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        fastcgi_connect_timeout  3600s;
        fastcgi_send_timeout 36600s;
        fastcgi_read_timeout 3600s;
        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.headless-marketplace-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 1024M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self' http://localhost.headless-marketplace-demo.com;" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        fastcgi_connect_timeout  3600s;
        fastcgi_send_timeout 36600s;
        fastcgi_read_timeout 3600s;
        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.headless.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass php:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.headless-commerical-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass php:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        
        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.cards-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.box-3d-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.cards-demo1.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.gifts-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.wide-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.photobooks-demo.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.designer-prestashop.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass php:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.designer-woocommerce.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass php:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.designer-shopify.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}
server {
    listen 80;
    server_name localhost.designer-bigcommerce.com;

    root /var/www/html/pub;
    index index.php index.html index.htm;
    client_max_body_size 50M;
    fastcgi_hide_header X-Powered-By;
    fastcgi_hide_header X-Frame-Options;
    fastcgi_hide_header Strict-Transport-Security;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
    add_header Cross-Origin-Opener-Policy "same-origin-allow-popups" always;
    add_header Cross-Origin-Resource-Policy "same-site" always;
    add_header Content-Security-Policy "frame-ancestors 'self';" always;


    # Get real client IP from Kubernetes / Load Balancer
    real_ip_header X-Forwarded-For;
    set_real_ip_from 10.42.0.0/16;
    real_ip_recursive on;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    # Block Magento version disclosure
    location ~* ^/magento_version {
        deny all;
        return 404;
    }

    location ^~ /media/ {
        # Allow expected static media and frontend asset file types only.
        location ~* \.(?:jpg|jpeg|png|gif|webp|avif|svg|ico|bmp|woff|woff2|ttf|otf|eot|pdf|csv|txt|xml|zip|gz|bz2|tar|rar|css|js|map|json|ai|eps|evd|gltf|glb|kfpx)$ {
            try_files $uri =404;
            access_log off;
            log_not_found off;
        }
        # Deny everything else (no extension, php, unknown)
        return 403;
    }

    # Node process running
    location /node {
        rewrite ^/node(/.*)$ $1 break;
        proxy_pass http://127.0.0.1:3000/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    }
    location = /byi-cmnd.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location = /is-db-px-in.php {
        allow 27.109.16.251;
        deny all;

        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~ \.php$ {
        include fastcgi_params;
        fastcgi_pass 127.0.0.1:9000; # Ensure this matches your PHP-FPM socket or IP:port
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

        # Manually adding the common FastCGI parameters
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        # fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
        fastcgi_param QUERY_STRING $query_string;
        fastcgi_param REQUEST_METHOD $request_method;
        fastcgi_param CONTENT_TYPE $content_type;
        fastcgi_param CONTENT_LENGTH $content_length;

        fastcgi_intercept_errors on;
        fastcgi_buffers 16 16k;
        fastcgi_buffer_size 32k;
    }
    location ~* ^/(cron|update|install)\.php$ {
        deny all;
        return 404;
    }
    location ~* ^/pub/(media|static|assets|images)/.*\.php$ {
        deny all;
        return 403;
    }
    location ~ /\.ht {
        deny all;
    }
}