Deny access to internal directories
Remove nginx server tokens