upstream php-handler {
	#server 127.0.0.1:9000;
	server unix:/var/run/php/php7.2-fpm.sock; # 18.04默认使用unix sock
}

server {
	#listen 80; # 不需要HTTPS的把这行前面的#删掉
	#listen [::]:80; # 同上，并且把下面两行监听 443 端口的在开头加 # 号
	listen 443 ssl http2 fastopen=3;
	listen [::]:443 ssl http2 fastopen=3;
	server_name example.com;

	# 不启用 HTTPS 的话这里到下面一段都不需要
	ssl_certificate /etc/nginx/ssl/fullchain.cer;
	ssl_certificate_key /etc/nginx/ssl/example.com.key;

	add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
	add_header X-Content-Type-Options nosniff;
	add_header X-XSS-Protection "1; mode=block";
	add_header X-Robots-Tag none;
	add_header X-Download-Options noopen;
	add_header X-Permitted-Cross-Domain-Policies none;
	add_header Referrer-Policy no-referrer;
	# 不启用 HTTPS 的话上面到这里一段都不需要

	# Remove X-Powered-By, which is an information leak
	fastcgi_hide_header X-Powered-By;

	# Path to the root of your installation
	root /var/www/html/; # Ubuntu 默认路径，不需要子目录把这里改成 NextCloud 的根目录如 /var/www/html/nextcloud

	location = /robots.txt {
		allow all;
		log_not_found off;
		access_log off;
	}

	location = /.well-known/carddav {
		# 如果不需要子目录把下面一行的 "/subfolder" 删掉
		return 301 $scheme://$host/subfolder/remote.php/dav;
	}

	location = /.well-known/caldav {
		# 如果不需要子目录把下面一行的 "/subfolder" 删掉
		return 301 $scheme://$host/subfolder/remote.php/dav;
	}

	location /.well-known/acme-challenge { }

	# subfolder 改成你放的文件夹名字，放在上面 "root" 里定义的 /var/www/html/ 根目录下
	# 如果不需要子目录就这行 "location ^~ /subfolder {" 删掉。注意下面还有一行 "}" 需要删除！
	location ^~ /subfolder {
		# set max upload size
		client_max_body_size 512M;
		fastcgi_buffers 64 4K;

		# Enable gzip but do not remove ETag headers
		gzip on;
		gzip_vary on;
		gzip_comp_level 4;
		gzip_min_length 256;
		gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
		gzip_types application/atom+xml application/javascript application/json
			application/ld+json application/manifest+json application/rss+xml
			application/vnd.geo+json application/vnd.ms-fontobject
			application/x-font-ttf application/x-web-app-manifest+json
			application/xhtml+xml application/xml font/opentype image/bmp
			image/svg+xml image/x-icon text/cache-manifest text/css text/plain
			text/vcard text/vnd.rim.location.xloc text/vtt text/x-component
			text/x-cross-domain-policy;

		# 如果不需要子目录把下面一行的 "/subfolder" 改成 "/"
		location /subfolder {
			# 如果不需要子目录把下面一行的 "/subfolder/" 删掉
			rewrite ^ /subfolder/index.php$request_uri;
		}

		# 如果不需要子目录把下面一行的 "/subfolder" 改成 "/"
		location ~ ^/subfolder/(?:build|tests|config|lib|3rdparty|templates|data)/ {
			deny all;
		}
		# 如果不需要子目录把下面一行的 "/subfolder" 改成 "/"
		location ~ ^/subfolder/(?:\.|autotest|occ|issue|indie|db_|console) {
			deny all;
		}

		# 如果不需要子目录把下面一行的 "/subfolder" 改成 "/"
		location ~ ^/subfolder/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+)\.php(?:$|/) {
			fastcgi_split_path_info ^(.+?\.php)(/.*)$;
			include fastcgi_params;
			fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
			fastcgi_param PATH_INFO $fastcgi_path_info;
			fastcgi_param HTTPS on;
			#Avoid sending the security headers twice
			fastcgi_param modHeadersAvailable true;
			fastcgi_param front_controller_active true;
			fastcgi_pass php-handler;
			fastcgi_intercept_errors on;
			fastcgi_request_buffering off;
		}

		# 如果不需要子目录把下面一行的 "/subfolder/" 改成 "/"
		location ~ ^/subfolder/(?:updater|ocs-provider)(?:$|/) {
			try_files $uri/ =404;
			index index.php;
		}

		location ~ \.(?:css|js|woff2?|svg|gif)$ {
			# 如果不需要子目录把下面一行的 "/subfolder" 删掉
			try_files $uri /subfolder/index.php$request_uri;
			add_header Cache-Control "public, max-age=15778463";
			add_header X-Content-Type-Options nosniff;
			add_header X-XSS-Protection "1; mode=block";
			add_header X-Robots-Tag none;
			add_header X-Download-Options noopen;
			add_header X-Permitted-Cross-Domain-Policies none;
			add_header Referrer-Policy no-referrer;

			# Optional: Don't log access to assets
			access_log off;
		}

		location ~ \.(?:png|html|ttf|ico|jpg|jpeg)$ {
			# 如果不需要子目录把下面一行的 "/subfolder" 删掉
			try_files $uri /subfolder/index.php$request_uri;
			# Optional: Don't log access to other assets
			access_log off;
		}

	} # 如果不需要子目录把这行删除
}