Nginx Error 404 - Symfony2 with Vagrant

Question

I installed a fresh vagrant machine with Symfony and NGINX, but after I got:

// Opened: http://project.app/app_dev.php 

https://cl.ly/image/3D2M1N1h1W0f

404 NOT FOUND

and

// Opened http://project.app/app.php or http://project.app

https://cl.ly/image/3G0Q47240G0p

My nginx config:

server {
        listen 80;

        root /vagrant/symfony/web;
        index index.html index.htm index.php app.php app_dev.php;

        # Make site accessible from ...
        server_name 192.168.22.10.xip.io handshake.dev;

        access_log /var/log/nginx/vagrant.com-access.log;
        error_log  /var/log/nginx/vagrant.com-error.log error;

        charset utf-8;

        location / {
            try_files $uri $uri/ /app.php?$query_string /index.php?$query_string;
        }

        location = /favicon.ico { log_not_found off; access_log off; }
        location = /robots.txt  { access_log off; log_not_found off; }

        error_page 404 /index.php;

        # pass the PHP scripts to php5-fpm
        # Note: .php$ is susceptible to file upload attacks
        # Consider using: "location ~ ^/(index|app|app_dev|config).php(/|$) {"
        location ~ .php$ {
            try_files $uri =404;
            fastcgi_split_path_info ^(.+.php)(/.+)$;
            # With php5-fpm:
            fastcgi_pass 127.0.0.1:9000;
            fastcgi_index index.php;
            include fastcgi_params;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            fastcgi_param LARA_ENV local; # Environment variable for Laravel
            fastcgi_param HTTPS off;
        }

        # Deny .htaccess file access
        location ~ /\.ht {
            deny all;
        }
    }

    server {
        listen 443;

        ssl on;
        ssl_certificate     /etc/ssl/xip.io/xip.io.crt;
        ssl_certificate_key /etc/ssl/xip.io/xip.io.key;

        root /vagrant/symfony/web;
        index index.html index.htm index.php app.php app_dev.php;

        # Make site accessible from ...
        server_name 192.168.22.10.xip.io handshake.dev;

        access_log /var/log/nginx/vagrant.com-access.log;
        error_log  /var/log/nginx/vagrant.com-error.log error;

        charset utf-8;

        location / {
            try_files $uri $uri/ /app.php?$query_string /index.php?$query_string;
        }

        location = /favicon.ico { log_not_found off; access_log off; }
        location = /robots.txt  { access_log off; log_not_found off; }

        error_page 404 /index.php;

        # pass the PHP scripts to php5-fpm
        # Note: .php$ is susceptible to file upload attacks
        # Consider using: "location ~ ^/(index|app|app_dev|config).php(/|$) {"
        location ~ .php$ {
            try_files $uri =404;
            fastcgi_split_path_info ^(.+.php)(/.+)$;
            # With php5-fpm:
            fastcgi_pass 127.0.0.1:9000;
            fastcgi_index index.php;
          include fastcgi_params;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            fastcgi_param LARA_ENV local; # Environment variable for Laravel
            fastcgi_param HTTPS on;
        }

        # Deny .htaccess file access
        location ~ /\.ht {
            deny all;
        }
    }

What did I wrong?

Update: Opening the IP/URL directly without app_dev.php I got now:

403 Forbidden

Yes, I have routing.yml and yes I have Bundles.