nginx.conf

proxy_busy_buffers_size   512k;
proxy_buffers   4 512k;
proxy_buffer_size   256k;
fastcgi_buffers 16 256k;
fastcgi_buffer_size 256k;

index index.php index.html index.htm;

server_tokens off;

include /workspace/hidemywpghost.conf;

client_max_body_size 256M;

add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
add_header Strict-Transport-Security 'max-age=300; includeSubDomains; preload; always;';

gzip on;
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
gzip_http_version 1.1;
gzip_types image/svg+xml text/plain text/xml text/css text/javascript application/xml application/xhtml+xml application/rss+xml application/javascript application/x-font-ttf application/vnd.ms-fontobject font/opentype font/ttf font/eot font/otf;

set $no_cache 0;
if ($request_uri ~* "/wp-admin") { set $no_cache 1; }
if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass|wordpress_no_cache|wordpress_logged_in")  { set $no_cache 1; }

#include letsencrypt.conf;
#include theexample-redirections.conf;
rewrite ^/wp-content(/.*)$ /app$1  last;

location = /favicon.ico {
        log_not_found off;
        access_log off;
}

location = /robots.txt {
        return 200 "User-agent: *\nDisallow: /wp-admin";
}

location ^~ /xmlrpc.php {
        deny all;
}

location ^~ /app/uploads/ {
        expires max;
}

#location ^~ /status/ {
#        stub_status on;
#        allow 127.0.0.1;
#        deny all;
#}

location / {
        try_files $uri $uri/ /index.php?$args;
}

location ~* /app/uploads/.*.php$ {
        deny all;
}

location ~ \.php$ {
        include fastcgi_params;
        try_files $uri =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass unix:/tmp/heroku.fcgi.8080.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}

location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
        expires max;
        log_not_found on;
}