Configuration files for nginx

nginx config example

# Replace every VARIABLE

server {
	server_name			YOUR_SERVER_NAME;
	
	listen				80 default_server;
	listen				[::]:80 default_server;
	
	return				301 https://$server_name$request_uri;
}

server {
	server_name			YOUR_SERVER_NAME;
	root				PATH_TO_PUBLIC_WEBSITE_FOLDER;

	listen				443 ssl default_server http2;
	listen				[::]:443 ssl default_server http2;

	index				index.php index.html index.htm;

	# SSL
	include				PATH_TO_NGINX_CONFIG_FOLDER/nginx_ssl_SPECIFIC.conf;
	
	# Laravel
	#include			PATH_TO_NGINX_CONFIG_FOLDER/nginx_laravel.conf;
	
	# Auth Basic Default
	#include			PATH_TO_NGINX_CONFIG_FOLDER/nginx_auth_basic_default.conf;

	# PHP 5
	#include			PATH_TO_NGINX_CONFIG_FOLDER/nginx_php5.conf;

	#PHP 7
	#include			PATH_TO_NGINX_CONFIG_FOLDER/nginx_php7.conf;
}

dhparam.sh

# to generate your dhparam.pem file, run in the terminal
sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048

nginx_auth_basic_default.conf

# Except letsencrypt folder
location / {
	auth_basic				"Restricted";
	auth_basic_user_file			/etc/nginx/.htpasswd;
}
location /.well-know {
}

nginx_laravel.conf

client_max_body_size 5M;
location / {
	try_files 			$uri $uri/ /index.php?$query_string;
}

nginx_php5.conf

location ~ \.php$ {
	try_files			$uri =404;
	fastcgi_split_path_info		^(.+\.php)(/.+)$;
	fastcgi_pass			unix:/var/run/php5-fpm.sock;
	fastcgi_index			index.php;
	fastcgi_param			SCRIPT_FILENAME $document_root$fastcgi_script_name;
	include				fastcgi_params;
}

nginx_php7.conf

location ~ \.php$ {
	try_files			$uri /index.php =404;
	fastcgi_split_path_info		^(.+\.php)(/.+)$;
	fastcgi_pass			unix:/var/run/php/php7.0-fpm.sock;
	fastcgi_index			index.php;
	fastcgi_param			SCRIPT_FILENAME $document_root$fastcgi_script_name;
	include				fastcgi_params;
}

nginx_proxy.conf

location / {
  proxy_set_header   X-Real-IP $remote_addr;
  proxy_set_header   Host      $http_host;
  proxy_pass    http://IP:PORT;
}

nginx_ssl.conf

# Copy and personalize those directives in the nginx config file. Don't forget to remove the #
#ssl_certificate			PATH_TO_SSL_FOLDER/fullchain.pem;
#ssl_certificate_key			PATH_TO_SSL_FOLDER/privkey.pem;
#ssl_trusted_certificate		PATH_TO_SSL_FOLDER/chain.pem;

add_header				Strict-Transport-Security "max-age=31536000; includeSubdomains";
ssl_ciphers				'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
ssl_dhparam				/etc/ssl/certs/dhparam.pem;
ssl_prefer_server_ciphers		on;
ssl_protocols				TLSv1 TLSv1.1 TLSv1.2;
ssl_session_cache			shared:SSL:10m;
ssl_session_timeout			10m;
ssl_stapling				on;
ssl_stapling_verify			on;
resolver				8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout			5s;

nginx_ssl_SPECIFIC.conf

# Copy and personalize those directives in the nginx config file. Don't forget to remove the #
ssl_certificate			PATH_TO_SSL_FOLDER/fullchain.pem;
ssl_certificate_key		PATH_TO_SSL_FOLDER/privkey.pem;
ssl_trusted_certificate		PATH_TO_SSL_FOLDER/chain.pem;