location ~ ^/matomo/(config|tmp|core|lang) { deny all; return 403; }

location ~ ^/matomo(.*)\.php(.*)$ {
    alias /library/www/matomo$1.php$2;    # /library/www/matomo
    proxy_set_header X-Real-IP  $remote_addr;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header Host $host;
    fastcgi_pass php;
    fastcgi_index index.html;
    include fastcgi_params;
    fastcgi_split_path_info ^(.+\.php)(.*)$;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param SCRIPT_NAME     $fastcgi_script_name;
    fastcgi_param PATH_INFO       $2;
}

location ~ ^/matomo(/)? {
    root /library/www;
}