diff --git a/conf/nginx.conf b/conf/nginx.conf
index 3af1432..9caee66 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -16,6 +16,11 @@ location __PATH__/ {
 	# Override CSP header to make SSOWAT user panel compatible with kanboard
 	more_set_headers Content-Security-Policy "default-src 'self' 'unsafe-eval' data:;";
 
+	# Deny access to the directory data
+	location __PATH__/data {
+        deny all;
+    }
+
 	location ~ [^/]\.php(/|$) {
 		fastcgi_split_path_info ^(.+?\.php)(/.*)$;
 		fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock;