location /lam { index index.html; alias /usr/share/ldap-account-manager; autoindex off; location ~ \.php$ { fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/var/run/php7-fpm.sock; fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $request_filename; } location ~ /lam/(tmp/internal|sess|config|lib|help|locale) { deny all; return 403; } }