message: improvement: allow access only for .txt and .md
diff: @@ -17,10 +17,17 @@ server {
  location / {
  include /etc/nginx/conf.d/drupal/location_prepend*.conf;
  + ## Do not allow access to .txt and .md unless inside sites/*/files/
  + location ~* ^(?!.+sites\/.+\/files\/)(?:.+\.(?:txt|md))$ {
  + deny all;
  + access_log off;
  + log_not_found off;
  + }
  +
  ## Replicate the Apache <FilesMatch> directive of Drupal standard
  ## .htaccess. Disable access to any code files. Return a 404 to curtail
  - ## information disclosure. Hide also the text files.
  - location ~* ^(?!.+sites\/.+\/files)(?:.+\.(?:htaccess|make|txt|yml|md|engine|inc|info|install|module|profile|po|pot|sh|.*sql|test|theme|tpl|xtmpl)|code-style\.pl)$ {
  + ## information disclosure.
  + location ~* ^(?:.+\.(?:htaccess|make|md|engine|inc|info|install|module|profile|po|pot|sh|.*sql|test|theme|tpl|xtmpl)|code-style\.pl)$ {
  deny all;
  access_log off;
  log_not_found off;
  