nginx.conf.template now blocks access to dotfiles