Fix insecure nginx PHP config