How to exploit LFI to retrieve sensitive files in NGINX

Question

I am studying Local File Inclusion (LFI) vulnerabilities and want to understand how attackers can exploit them specifically in an NGINX environment. My main questions are:

• How does NGINX’s configuration affect LFI exploits?
• What are common techniques to bypass restrictions, such as null-byte truncation or path normalization?
• How can an attacker retrieve sensitive files like /etc/passwd or application source code?
  I would also like to know the best mitigation strategies to secure an NGINX server against such attacks.