machete/conf/nginx_machete.conf

# machete
server {
    listen       80;
    server_name  _;

    #charset UTF-8;
    #access_log  logs/machete.access.log  main;

    client_max_body_size 20m;

    root /var/www/machete/www;
    index index.php index.html;

    location ~ .*\/([^\/]*\.(gif|jpg|jpeg|png|webp|bmp|swf|js|css|ico|mp4|mov|mp3|ts)) {
        # support file download
        if ($arg_download) {
            add_header Content-disposition "attachment; filename=$1";
        }

        expires 30d;
    }

    gzip on;
    gzip_comp_level 4;
    gzip_types text/css text/xml application/x-javascript application/atom+xml application/rss+xml application/x-shockwave-flash;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    location ~ ^/index\.php$ {
        fastcgi_pass   127.0.0.1:9000;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME  /var/www/machete/www$fastcgi_script_name;
        include        fastcgi_params;
    }

    # deny all other php
    location ~ \.php {
        deny  all;
    }

    # deny all md
    location ~ \.md {
        deny  all;
    }

    # deny all txt
    location ~ \.txt {
        deny  all;
    }

    # deny all url
    location ~ \.url {
        deny  all;
    }

    # deny all hidden files
    location ~ /\. {
        deny  all;
    }
}