http {
    server_tokens off;
    add_header    X-Content-Type-Options nosniff;

    upstream php_upstream {
        server 127.0.0.1:9000;
    }

    include mime.types;

    server {
        listen               8000;
        client_max_body_size 5M;
        root                 /srv/app/public;

        location / {
            # try to serve file directly, fallback to index.php
            try_files $uri /index.php$is_args$args;
        }

        location ~ ^/index\.php(/|$) {
            fastcgi_pass             php_upstream;
            fastcgi_split_path_info  ^(.+\.php)(/.*)$;
            fastcgi_intercept_errors on;
            proxy_intercept_errors   on;
            include                  fastcgi_params;
            fastcgi_param            SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
            fastcgi_param            DOCUMENT_ROOT $realpath_root;
            fastcgi_param            PATH_INFO $fastcgi_path_info;
            fastcgi_param            HTTP_X_REQUEST_ID $request_id;
            internal;
        }

        # this prevents access to other php files you don't want to be accessible.
        location ~ \.php$ {
            return 404;
        }
    }
}