server {
    listen 443;
    root /var/www/devroot;
    ssl on;
    ssl_certificate /etc/letsencrypt/live/xxxxxxxxxxxxxx/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/xxxxxxxxxxxxxx/privkey.pem;
    server_name xxxxxxxxxxxxxx;
    location ^~ /kanboard {
	allow all;
    	index index.php;
        location /kanboard {
            try_files $uri $uri/ /kanboard/index.php$is_args$args;
        }

        location ~ ^/kanboard/(?:kanboard|config.php|config.default.php) {
            deny all;
        }

        location ~* /kanboard/data {
            deny all;
        }

        location ~ \.php(?:$|/) {
            fastcgi_split_path_info ^(.+\.php)(/.+)$;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            fastcgi_param PATH_INFO $fastcgi_path_info;
            fastcgi_param HTTPS on; # Use only if HTTPS is configured
	fastcgi_index index.php;
           include fastcgi_params;
            fastcgi_pass   unix:run/php-fpm.sock;
        }

        location ~ /kanboard/\.ht {
            deny all;
        }
    }
}