server {
    listen 80;
    listen [::]:80;

    server_name quditinfotech.com www.quditinfotech.com;

    root /var/www/quditinfotech.com;
    index index.php index.html;

    # Upload size (optional)
    client_max_body_size 50M;

    # Main routing
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    # PHP-FPM handling
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;

        # IMPORTANT: set your installed PHP-FPM socket path
        # Common: php8.1-fpm.sock / php8.2-fpm.sock / php8.3-fpm.sock
        fastcgi_pass unix:/run/php/php8.3-fpm.sock;

        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }

    # Deny hidden files
    location ~ /\.(?!well-known).* {
        deny all;
    }

    # Security: block PHP execution in uploads (if you have uploads folder)
    location ~* ^/uploads/.*\.php$ {
        deny all;
    }

    listen 443 ssl; # managed by Certbot
    listen [::]:443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/quditinfotech.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/quditinfotech.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


}