# Adapt DOMAIN and absolute document root; merge into your existing server block.
server {
 listen 80;
 server_name DOMAIN;
 root /var/www/kyronode/public;
 index index.php;
 location / { try_files $uri $uri/ /index.php?$query_string; }
 location ~ ^/(includes|storage|data|ai|deploy|tools)(/|$) { return 404; }
 location ~ /\. { return 404; }
 location ~* \.(zip|tar|gz|sql|sqlite|log|bak|md|txt|env|key|pem)$ { return 404; }
 location ~ \.php$ { include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_pass unix:/run/php/php8.3-fpm.sock; }
}
# Enable HTTPS before public launch. This is a non-production HTTP example only.