Нет, чтобы не делать два location location ~* ^.+\.(xml|ini|bin|sql|log)$ { deny all; return 403; } location ~* ^/(hosts|core|patches|db|others)/ { deny all; return 403; } Posted at Nginx Forum: https://forum.nginx.org/read.php?21,272923,272960#msg-272960