Sanity check of my config - is it secure?

[benseb]

Thanks, in your opinion what's the best way to approach this? I
basically want to ensure that our static.domain.com subdomain ONLY
servers image/js/css files.

Whilst I have set 'location' for only the folders which have images, etc
in, I want to ensure that if someone put a script into one of those
directories, it would not be executed.

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,199902,201276#msg-201276