server {
    listen 80;
    listen [::]:80;
    server_name ONION_HERE;
    server_tokens off;
    access_log  off;
    error_log off;
    root /var/jail/nginx/
    index.php index.html;
    location / {
        try_files $uri $uri/ =404;
    }
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/jail/php/run/php/php7.0-fpm.sock;
    }

    location ~ /\.ht {
        deny all;
    }
}
server{
	add_header X-Frame-Options SAMEORIGIN;
	add_header X-Content-Type-Options nosniff;
	add_header X-XSS-Protection "1; mode=block";
}
server {
    listen 80;
    listen [::]:80;
    server_name IP_HERE;
    return 444;
}