server { listen 443 ssl; listen [::]:443 ssl; client_max_body_size 1024M; root /app/public; server_name _; index index.html index.htm; ssl_certificate /certs/example.crt; ssl_certificate_key /certs/example.key; # ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # ssl_ciphers HIGH:!aNULL:!MD5; location / { # First attempt to serve request as file, then # as directory, then fall back to displaying a 404. try_files $uri $uri/; } # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # location ~ /\.ht { deny all; } }