Оптимизация Nginx для «Композитного сайта» 1С-Битрикс (Composite Cache)

# /etc/nginx/sites-available/composite.example.com.conf

    listen 80;
    server_name composite.example.com;
    return 301 https://composite.example.com$request_uri;
}

server {
    listen 443 ssl http2;
    server_name composite.example.com;

    root /var/www/composite.example.com/public_html;

    # Security Headers
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-XSS-Protection "1; mode=block" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
    add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always;

    index index.php index.html;

    ssl_certificate /etc/letsencrypt/live/composite.example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/composite.example.com/privkey.pem;

    # Проверка композитного кэша Битрикс
    set $is_composite 1;
    if ($request_method = POST) { set $is_composite 0; }
    if ($query_string != "") { set $is_composite 0; }
    if ($http_cookie ~* "BITRIX_SM_NCC=Y|BITRIX_SM_LOGIN|BITRIX_SM_SALE_UID") {
        set $is_composite 0;
    }

    # Поиск сгенерированного HTML композита
    set $composite_file "/bitrix/cache/composite/$host$uri/index.html";
    if ($is_composite = 1) {
        set $composite_file "/bitrix/cache/composite/$host$uri/index.html";
    }

    location / {
        try_files $composite_file $uri $uri/ @bitrix;
    }

    location @bitrix {
        fastcgi_pass unix:/run/php/php8.2-fpm.sock;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root/bitrix/urlrewrite.php;
    }

    location ~ \\.php$ {
        try_files $uri @bitrix;
        fastcgi_pass unix:/run/php/php8.2-fpm.sock;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }
}