server "search.yonderly.org" {
 listen on egress port http
 listen on egress tls port https

 tls {
  certificate "/etc/ssl/search.yonderly.org.crt"
  key "/etc/ssl/private/search.yonderly.org.key"
 }

 location "/.well-known/acme-challenge/*" {
  root "/acme"
  request strip 2
 }

 root "/4get"

 location "/" {
  request rewrite "/index.php"
  
  fastcgi socket "/run/php-fpm.sock"
 }
 location match "^([^\.]+)$" {
  request rewrite "/%1.php"
  
  fastcgi socket "/run/php-fpm.sock"
 }

 location "/data" { block drop }
}