postscripter Hi! One manual says, I should protect /data/ with location ^~ /data/ { return 403; }, but another one recommends location ~ ^/data/ { internal ; }. Which one of them is better and which 1 is outdated? Tnx!
schplurtz postscripter So long as you don't use the xsendfile option, you may use whichever you want. They both protect the data folder from unintended access.