diff --git a/README.md b/README.md
index 749c139..05d4027 100644
--- a/README.md
+++ b/README.md
@@ -19,7 +19,7 @@ If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/in
 BookWyrm is a social network for tracking your reading, talking about books, writing reviews, and discovering what to read next.
 
 
-**Shipped version:** 0.7.1~ynh1
+**Shipped version:** 0.7.2~ynh1
 
 **Demo:** https://joinbookwyrm.com/fr/
 
diff --git a/README_fr.md b/README_fr.md
index d188675..1640bfc 100644
--- a/README_fr.md
+++ b/README_fr.md
@@ -19,7 +19,7 @@ Si vous n’avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) po
 BookWyrm est un réseau social pour garder la trace de vos lectures, parler de livres, écrire des critiques et découvrir quoi lire ensuite.
 
 
-**Version incluse :** 0.7.1~ynh1
+**Version incluse :** 0.7.2~ynh1
 
 **Démo :** https://joinbookwyrm.com/fr/
 
diff --git a/conf/nginx.conf b/conf/nginx.conf
index 4f85de8..4a84389 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -1,12 +1,26 @@
 #sub_path_only rewrite ^__PATH__$ __PATH__/ permanent;
 location __PATH__/ {
-
   proxy_pass       http://127.0.0.1:__PORT__/;
   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header Host $host;
   proxy_redirect   off;
 }
 
+# directly serve images and static files from the
+# bookwyrm filesystem using sendfile.
+# make the logs quieter by not reporting these requests
+location ~ \.(bmp|ico|jpg|jpeg|png|tif|tiff|webp|css|js)$ {
+  root __INSTALL_DIR__;
+  try_files $uri =404;
+  more_set_headers "X-Cache-Status: STATIC";
+  access_log off;
+}
+
+# block access to any non-image files from images or static
+location ~ ^/images/ {
+  return 403;
+}
+
 location /images/ {
   alias __INSTALL_DIR__/images/;
 }
diff --git a/manifest.toml b/manifest.toml
index 2cc9fbf..51ca305 100644
--- a/manifest.toml
+++ b/manifest.toml
@@ -5,7 +5,7 @@ name = "BookWyrm"
 description.en = "Platform for social reading"
 description.fr = "Plateforme de lecture sociale"
 
-version = "0.7.1~ynh1"
+version = "0.7.2~ynh1"
 
 maintainers = ["oufmilo"]
 
@@ -49,8 +49,8 @@ ram.runtime = "50M"
     [resources.sources]
 
         [resources.sources.main]
-        url = "https://github.com/bookwyrm-social/bookwyrm/archive/refs/tags/v0.7.1.tar.gz"
-        sha256 = "a5a1422bf26728b6d73c267f57946717c6d26513e48dc25687ab633a673ebf4e"
+        url = "https://github.com/bookwyrm-social/bookwyrm/archive/refs/tags/v0.7.2.tar.gz"
+        sha256 = "258831fa54c15fd8ea9a3ba06bb9afab016d754a0850118e65fdb70dfa022df7"
 
         autoupdate.strategy = "latest_github_tag"
 
diff --git a/tests.toml b/tests.toml
index 2f1968a..73f347a 100644
--- a/tests.toml
+++ b/tests.toml
@@ -17,6 +17,6 @@ test_format = 1.0
     # Commits to test upgrade from
     # -------------------------------
     
-    test_upgrade_from.7600f04.name = "0.5.4"
     test_upgrade_from.d291f0e.name = "0.6.4"
     test_upgrade_from.749f46f.name = "0.6.6"
+    test_upgrade_from.4ad5a01.name = "0.7.1"