NGINX default server (letsencrypt)

server.conf

# Default server configuration
#
server {
    listen 80;
    listen [::]:80;
    server_name domain.net www.domain.net;

    access_log /var/log/nginx/domain-http.log;
    error_log /var/log/nginx/domain-error-http.log;


    root /var/www/html;

    # Add acme-challenge for letsencrypt
    location ~ /\.well-known/acme-challenge {
        allow all;
    }

    # Add index.php to the list if you are using PHP
    index index.php index.html index.htm index.nginx-debian.html;

    location / {
        # First attempt to serve request as file, then
        # as directory, then fall back to displaying a 404.
        try_files $uri $uri/ =404;
    }

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;

        # With php7.0-cgi alone:
        #fastcgi_pass 127.0.0.1:9000;
        # With php7.0-fpm:
        fastcgi_pass unix:/run/php/php7.0-fpm.sock;
    }

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    location ~ /\.ht {
        deny all;
    }

}