more nginx

nginx.example.com.conf

@@ -8,6 +8,10 @@ server {
     server_name example.com;
 
     root /var/www/example.com/public_html;
+    
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-XSS-Protection "1; mode=block";
+    add_header X-Content-Type-Options "nosniff";
 
     index index.html index.htm index.php;
 
@@ -31,21 +35,19 @@ server {
     location ~ ^/(modules|vendor)\/(.*)\.((?!ico|gif|jpg|jpeg|png|js|css|less|sass|font|woff|woff2|eot|ttf|svg).)*$ {
         deny all;
     }
+    
+    error_page 404 /index.php;
 
     # Pass PHP Scripts To FastCGI Server
     location ~ \.php$ {
-        try_files $uri /index.php =404;
         fastcgi_split_path_info ^(.+\.php)(/.+)$;
         fastcgi_pass unix:/var/run/php/php7.2-fpm.sock; # Depends On The PHP Version
         fastcgi_index index.php;
-        include fastcgi_params;
         fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
-
-        fastcgi_intercept_errors off;
-        fastcgi_buffer_size 16k;
-        fastcgi_buffers 4 16k;
-        fastcgi_connect_timeout 300;
-        fastcgi_send_timeout 300;
-        fastcgi_read_timeout 300;
+        include fastcgi_params;
     }
-}
+
+    location ~ /\.(?!well-known).* {
+        deny all;
+    }
+}