nginx/custom.d/restrictions.conf

location = /favicon.ico {
    log_not_found off;
    access_log off;
}

location = /robots.txt {
    allow all;
    log_not_found off;
    access_log off;
}

location ~ /\. { deny all; }

location ~* /(?:uploads|files)/.*\.php$ { deny all; }