server { listen 80; server_name _; root /var/www/html/public; index index.php; client_max_body_size 10m; add_header X-Frame-Options DENY always; add_header X-Content-Type-Options nosniff always; location / { try_files $uri $uri/ /index.php?$query_string; } location ~ \.php$ { include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_pass app:9000; } location ~ /\. { deny all; } }