protect sqlite file from downloading

protect sqlite file from downloading and add instruction for nginx server