diff --git a/ubuntu/site.yml b/ubuntu/site.yml
index 6146f07..7d34802 100644
--- a/ubuntu/site.yml
+++ b/ubuntu/site.yml
@@ -168,6 +168,9 @@
         - ssl_stapling on
         - resolver 8.8.8.8 valid=300s
         - add_header Strict-Transport-Security max-age=31536000
+        - location ~ /(data|conf|bin|inc)/ {
+            deny all;
+          }
         - location / {
             try_files $uri $uri/ /index.php?$args;
           }