Grav - Ubuntu 16.04 NGINX Configuration

nginx.conf

server {

	listen 80;
	index index.html index.php;
	## Begin - Server Info
	root /home/grav/www/html;
	server_name localhost;
	## End - Server Info

	## Begin - Index # for subfolders, simply adjust the rewrite: # to use `/subfolder/index.php`
	location / {
		try_files $uri $uri/ /index.php?_url=$uri;
	}
	## End - Index

	## Begin - PHP
	location ~ \.php$ {
		# Choose either a socket or TCP/IP address
		fastcgi_pass unix:/run/php/php7.0-fpm.sock;
		# fastcgi_pass 127.0.0.1:9000;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_index index.php; include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root/$fastcgi_script_name;
	}
	## End - PHP

	## Begin - Security
	# deny all direct access for these folders
	location ~* /(.git|cache|bin|logs|backups)/.*$ {
		return 403;
	}
	# deny running scripts inside core system folders
	location ~* /(system|vendor)/.*\.(txt|xml|md|html|yaml|php|pl|py|cgi|twig|sh|bat)$ {
		return 403;
	}
	# deny running scripts inside user folder
	location ~* /user/.*\.(txt|md|yaml|php|pl|py|cgi|twig|sh|bat)$ {
		return 403;
	}
	# deny access to specific files in the root folder
	location ~ /(LICENSE|composer.lock|composer.json|nginx.conf|web.config|htaccess.txt|\.htaccess) {
		return 403;
	}
	## End - Security
}