Nginx +php-fpm instantcms2 +aaPanel ubuntu22.04

    location / {
        location ~* /(\.|credits\.txt|readme\.txt|license\..*\.txt$) { deny all; }
        try_files $uri /index.php?$args;
        location ~ ^/.+\.php$ {
            fastcgi_pass   unix:/tmp/php-cgi-81.sock;
            # If nginx running on TCP socket, comment line above and uncomment line beneath
            # fastcgi_pass    127.0.0.1:9000;
            include fastcgi_params;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            }
    }

location / {
        index index.php index.html;
        try_files $uri $uri/ /index.php?$args;
    }

    # Forbidden files or directories
    location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md)
    {
        return 404;
    }
 
    # Directory verification related settings for one-click application for SSL certificate
    location ~ \.well-known{
        allow all;
    }
 
    #Prohibit putting sensitive files in certificate verification directory
    if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
        return 403;
    }
 
    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    {
        expires      30d;
        error_log /dev/null;
        access_log /dev/null;
    }
 
    #всё запрещаем, выбранное разрешаем. Что не разрешено, то запрещено. Это правильный подход.
    location ~ ^/cache {
        deny all;
        location ~ \.(js|css|xml)$ {
            allow all;
        }
    }
    location ~ .*\.(js|css)?$
    {
        expires      12h;
        error_log /dev/null;
        access_log /dev/null; 
    }
 
    location /templates {
        location ~* \.(js|css|scss|xml|png|gif|jpg|jpeg|ico|bmp|map|eot|svg|ttf|woff|woff2)$ {
            allow all;
            }
        deny all;
    }
 
    location / {
        index index.php index.html;
        try_files $uri $uri/ /index.php?$args;
    }
 
    location /cache {
        location ~* \.(js|css|xml)$ {
            allow all;
            }
        deny all;
    }
 
    location /static {
        location ~ \.php$ { return 403; }
    }
 
    location /system {
        deny all;
    }
 
    location /upload {
        location ~* \.php$ { return 403; }
    }
 
    location /wysiwyg {
        autoindex off;
        location ~* \.(js|css|htm|html|scss|xml|png|gif|jpg|jpeg|ico|bmp|map|eot|svg|ttf|woff|woff2)$ {
            allow all;
            }
        deny all;
    }
     location ~ \.php$ {
        try_files $uri =404;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $request_filename;
        fastcgi_intercept_errors on;
    }
 
    location ~ ^/sitemap(.*)\.xml$ {
        rewrite ^/sitemap(.*)\.xml$ /cache/static/sitemaps/sitemap$1.xml break;
    }