added nginx restrictions