diff --git a/conf/nginx.conf b/conf/nginx.conf
index 9caee66..f1689fc 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -16,6 +16,10 @@ location __PATH__/ {
 	# Override CSP header to make SSOWAT user panel compatible with kanboard
 	more_set_headers Content-Security-Policy "default-src 'self' 'unsafe-eval' data:;";
 
+	location __PATH__/(?:kanboard|config.php|config.default.php) {
+        deny all;
+     }
+     
 	# Deny access to the directory data
 	location __PATH__/data {
         deny all;