location ~ /(data|conf|bin|inc|vendor)/ {
      deny all;
    }