Nginx conf for Passbolt

nginx.conf

worker_processes  3;

worker_rlimit_nofile 1024;
events {
    worker_connections  800;
}

 http {
    include       mime.types;
    default_type  application/octet-stream;
    index         index.html index.htm;

     keepalive_timeout  65;

    #gzip  on;

    server_tokens off;

server {
        listen 80;
        server_name passbolt.homelab.org;
        return 301 https://$server_name$request_uri;
}

    server {
        listen       443;
        server_name  passbolt.homelab.org;
        root         /var/www/html/passbolt/app/webroot/;
        index index.php;

# SSL Conf
        ssl on;
        ssl_certificate /etc/ssl/nginx.crt;
        ssl_certificate_key /etc/ssl/nginx.key;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA";
        ssl_ecdh_curve secp384r1;
        ssl_session_cache shared:SSL:10m;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root  /html;
        }

         location / {
        try_files $uri $uri/ /index.php?$args;
    }


        # pass the PHP scripts to FastCGI server listening on unix socket
        #
        location ~ \.php$ {
            try_files      $uri $uri/ =404;
            root           /var/www/html/passbolt/app/webroot;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }

    }
}