ansible/roles/nginx/php/templates/server.conf

server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  server_name {{ effective_domain }};

  ssl on;
  ssl_certificate {{ acme_fullchain_location }};
  ssl_certificate_key {{ acme_key_location }};

  include {{ nginx_snippets_directory }}/https;
  include {{ nginx_snippets_directory }}/root;

  index index.php index.html index.htm;
  root {{ src }};
  fastcgi_hide_header X-Powered-By;

  {% if status_page_path is defined and status_page_path|length -%}
  location {{ status_page_path }} {
    {{ status_page_acl | indent(width=4) }}
    fastcgi_split_path_info ^(.+?\.php)(/.*)$;
    fastcgi_index index.php;
    include {{ global_nginx_installation_directory }}/fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_param HTTPS on;
    fastcgi_param modHeadersAvailable true;
    fastcgi_param front_controller_active true;
    fastcgi_pass {{ pool_name }};
    fastcgi_intercept_errors on;
    fastcgi_request_buffering off;
  }
  {%- endif %}

  location ~\.php$ {
    fastcgi_split_path_info ^(.+?\.php)(/.*)$;
    try_files $uri =404;
    fastcgi_index index.php;
    include {{ global_nginx_installation_directory }}/fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_param HTTPS on;
    fastcgi_param modHeadersAvailable true;
    fastcgi_param front_controller_active true;
    fastcgi_pass {{ pool_name }};
    fastcgi_intercept_errors on;
    fastcgi_request_buffering off;
  }
}