Bookstack

server {
    listen              443 ssl;
    server_name         null.somedomain.name;

    ssl_certificate     /etc/letsencrypt/somedomain.name/certificates/_.somedomain.name.crt;
    ssl_certificate_key /etc/letsencrypt/somedomain.name/certificates/_.somedomain.name.key;
    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_ciphers         ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
    add_header Strict-Transport-Security "max-age=86400; includeSubDomains" always;

    root /var/www/bookstack/public/;
    index index.php index.html;

    location / {
      try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
      include snippets/fastcgi-php.conf;
      fastcgi_pass unix:/run/php/php8.4-fpm.sock;
    }
}