server {
    listen 172.16.9.2:8033;
    server_name cachet.local;

    root /opt/cachet/Cachet-2.5.0/public;
    index index.php;

#    ssl_certificate /etc/ssl/crt/cachet.mycompany.com.crt; # Or wherever your crt is
#    ssl_certificate_key /etc/ssl/key/cachet.mycompany.com.key; # Or wherever your key is
#    ssl_session_timeout 5m;

    ssl_protocols TLSv1.3 TLSv1.2;

    location / {
        add_header Strict-Transport-Security max-age=15768000;
        try_files $uri /index.php$is_args$args;
    }

    location ~ \.php$ {
                include fastcgi_params;
                fastcgi_pass unix:/run/php-fpm/nginx.sock;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                fastcgi_index index.php;
                fastcgi_keep_conn on;
                add_header Strict-Transport-Security max-age=15768000;
    }
}