nginx配置文件模版

server {
      listen 80 ;
      server_name xxxx.cn;
      if ($host ~ xxxx.cn)
      {
       rewrite ^/(.*)$ https://xxxx.cn$request_uri? permanent;
      }
      access_log /var/log/nginx/xxxx.cn-access.log;
      error_log /var/log/nginx/xxxx.cn-error.log;
}
server {
       listen 443;
       server_name xxxx.cn;
       root /var/www/xxxx/web;
       index index.html index.htm index.php ;
       ssl on ;
       ssl_certificate /etc/nginx/ssl/xxxx-fullchain.pem;
       ssl_certificate_key /etc/nginx/ssl/xxxx-privkey.pem;
       ssl_protocols       SSLv3 TLSv1 TLSv1.1 TLSv1.2;
       ssl_prefer_server_ciphers on;
       ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS;
       access_log /var/log/nginx/xxxx.cn-access.log;
       error_log /var/log/nginx/xxxx.cn-error.log;

       location ~ \.(gif|jpg|jpeg|png|css|js|ico)$ {

       }

       location / {
                # Check if a file or directory index file exists, else route it to index.php.
                try_files $uri $uri/ /index.php;
        }

       location ~ \.php$ {
            #fastcgi_pass             127.0.0.1:9000;
            fastcgi_pass             unix:/var/run/php/php7.0-fpm.sock;
            fastcgi_split_path_info ^(.+\.php)(/.+)$;
            fastcgi_index index.php;
            fastcgi_buffer_size       128k;
            fastcgi_buffers           64 128k;
            fastcgi_intercept_errors  on;
            fastcgi_param   PATH_INFO $fastcgi_path_info;
            fastcgi_param             HTTP_AUTHORIZATION  $http_authorization;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include                   fastcgi_params;
            fastcgi_connect_timeout 300;
            fastcgi_read_timeout 300;
            fastcgi_send_timeout 300;
            client_max_body_size 100m;
        }
        location ~ /.git
        {
            deny all;
        }
}