sf-https.conf

server {
    root /var/www/backend/app_public_dir;

    listen 443 ssl default_server;
    listen 80;

    server_name app_url;

    ssl_certificate         /etc/nginx/certs/app_url.crt;
    ssl_certificate_key     /etc/nginx/certs/app_url.key;
    ssl_protocols           TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers             HIGH:!aNULL:!MD5;

    client_max_body_size 100M;

    location / {
        # try to serve file directly, fallback to app.php
        try_files $uri /app_entrypoint.php$is_args$args;
    }

    location ~ ^/(app_entrypoint|config)\.php(/|$) {
        fastcgi_pass php_container:9000;
        fastcgi_split_path_info ^(.+\.php)(/.*)$;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        fastcgi_param DOCUMENT_ROOT $realpath_root;
        fastcgi_param COMPOSER_HOME /var/www/.composer;
        internal;
        fastcgi_read_timeout 300;
        fastcgi_param HTTPS on;
        fastcgi_param ORO_PHP_PATH /usr/local/bin/php;
    }

    location ~ \.php$ {
      return 404;
    }

    error_log /var/log/nginx/app_error.log;
    access_log /var/log/nginx/app_access.log;
}