#Deny access to dot files
location ~ /\. {
    deny all;
    access_log off;
    log_not_found off;
}