@parker @SpaceElf @parker @graf actually maybe not, this is working for me: location ~* /(media|proxy)/.*\.(js|mjs)$ { deny all; }