Drupal 8 nginx include

drupal8.conf

location = /favicon.ico {
  log_not_found off;
  access_log off;
}

location = /robots.txt {
  allow all;
  log_not_found off;
  access_log off;
}

# Very rarely should these ever be accessed outside of your lan
location ~* \.(txt|log)$ {
  allow 192.168.0.0/16;
  deny all;
}

location ~ \..*/.*\.php$ {
  return 403;
}

location ~ ^/sites/.*/private/ {
  return 403;
}

# Block access to "hidden" files and directories whose names begin with a
# period. This includes directories used by version control systems such
# as Subversion or Git to store control files.
location ~ (^|/)\. {
  return 403;
}

location / {
  try_files $uri /index.php?$query_string;
}

location @rewrite {
  rewrite ^/(.*)$ /index.php?q=$1;
}

location ~* ^/update.php { 
  fastcgi_split_path_info ^(.+\.php)(/.+)$;
  fastcgi_index update.php;
  include fastcgi_params;
  fastcgi_param SCRIPT_FILENAME $document_root/update.php;
  fastcgi_param SCRIPT_NAME /update.php;
  fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
}

location ~ \.php$ {
  fastcgi_split_path_info ^(.+\.php)(/.+)$;
  #NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
  include fastcgi_params;
  fastcgi_param SCRIPT_FILENAME $request_filename;
  fastcgi_intercept_errors on;
  fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
}

# Fighting with Styles? This little gem is amazing.
location ~ ^/sites/.*/files/styles/ {
  try_files $uri @rewrite;
}

location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
  expires max;
  log_not_found off;
}