Best thing for nginx is do an include in each server {} block. # /etc/nginx/deny-dot-files.conf location ~ /\. { access_log off; log_not_

Best thing for nginx is do an include in each server {} block. # /etc/nginx/deny-dot-files.conf location ~ /\. { access_log off; log_not_found off; deny all; } server { include /etc/nginx/deny-dot-files.conf; }