ISPManager default nginx-config

server {
    server_name domain.tld www.domain.tld;
    charset off;
    index index.php index.html;
    disable_symlinks if_not_owner from=$root_path;
    include /etc/nginx/vhosts-includes/*.conf;
    include /etc/nginx/vhosts-resources/domain.tld/*.conf;
    access_log /var/www/httpd-logs/domain.tld.access.log;
    error_log /var/www/httpd-logs/domain.tld.error.log notice;
    ssi on;
    set $root_path /var/www/username/data/www/domain.tld;
    root $root_path;
    location / {
        location ~ [^/]\.ph(p\d*|tml)$ {
            try_files /does_not_exists @php;
        }
    }
    return 301 https://$host:443$request_uri;
    gzip on;
    gzip_comp_level 5;
    gzip_disable "msie6";
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    listen 192.168.0.4:80;
    location @php {
        fastcgi_index index.php;
        fastcgi_param PHP_ADMIN_VALUE "sendmail_path = /usr/sbin/sendmail -t -i -f webmaster@domain.tld";
        fastcgi_pass unix:/var/www/php-fpm/username.sock;
        fastcgi_split_path_info ^((?U).+\.ph(?:p\d*|tml))(/?.+)$;
        try_files $uri =404;
        include fastcgi_params;
    }
}
server {
    server_name domain.tld www.domain.tld;
    ssl_certificate "/var/www/httpd-cert/username/domain.tld_le1.crtca";
    ssl_certificate_key "/var/www/httpd-cert/username/domain.tld_le1.key";
    ssl_ciphers EECDH:+AES256:-3DES:RSA+AES:!NULL:!RC4;
    ssl_prefer_server_ciphers on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    add_header Strict-Transport-Security "max-age=31536000;";
    ssl_dhparam /etc/ssl/certs/dhparam4096.pem;
    charset off;
    index index.php index.html;
    disable_symlinks if_not_owner from=$root_path;
    include /etc/nginx/vhosts-includes/*.conf;
    include /etc/nginx/vhosts-resources/domain.tld/*.conf;
    access_log /var/www/httpd-logs/domain.tld.access.log;
    error_log /var/www/httpd-logs/domain.tld.error.log notice;
    ssi on;
    set $root_path /var/www/username/data/www/domain.tld;
    root $root_path;
    gzip on;
    gzip_comp_level 5;
    gzip_disable "msie6";
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
    location / {
        location ~ [^/]\.ph(p\d*|tml)$ {
            try_files /does_not_exists @php;
        }
    }
    listen 192.168.0.4:443 ssl http2;
    location @php {
        fastcgi_index index.php;
        fastcgi_param PHP_ADMIN_VALUE "sendmail_path = /usr/sbin/sendmail -t -i -f webmaster@domain.tld";
        fastcgi_pass unix:/var/www/php-fpm/username.sock;
        fastcgi_split_path_info ^((?U).+\.ph(?:p\d*|tml))(/?.+)$;
        try_files $uri =404;
        include fastcgi_params;
    }
}