NGINX

Restricted access with password + exclude IP list

location / 
 { satisfy any;
   allow 192.1.1.1; 
   auth_basic "Restricted"; 
   auth_basic_user_file /usr/local/nginx/conf/htpasswd;
   deny all; 
}

fastcgi_pass unix:/tmp/fastcgi.socket;

debian nginx logrotate

/var/log/nginx/*.log {
        daily
        missingok
        rotate 52
        compress
        delaycompress
        notifempty
        create 640 root adm
        sharedscripts
        postrotate
                [ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
        endscript
}

php.ini - cgi.fix_pathinfo=1