location = /roundcubemail {

    alias /usr/share/roundcubemail/;

}

location /roundcubemail/ {

    root /usr/share;

    index index.php;

    location ~ ^/roundcubemail/bin/(.+)$ {

        deny all;

    }

    location ~ ^/roundcubemail/plugins/enigma/home/(.+)$ {

        deny all;

    }

    # Define who can access the installer

    # keep this secured once configured

    location ~ ^/roundcubemail/installer/(.+\.php)$ {

        allow 127.0.0.1;

        allow ::1;

        deny all;

        try_files $uri =404;

        fastcgi_intercept_errors on;

        include        fastcgi_params;

        fastcgi_param  SERVER_NAME      $host;

        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;

        fastcgi_pass   php-fpm;

    }

    # Define who can access the Webmail

    # You can enlarge permissions once configured

    location ~ ^/roundcubemail/(.+\.php)$ {

        allow 127.0.0.1;

        allow ::1;

        deny all;

        try_files $uri =404;

        fastcgi_intercept_errors on;

        include        fastcgi_params;

        fastcgi_param  SERVER_NAME      $host;

        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;

        fastcgi_pass   php-fpm;

    }

}