diff --git a/conf/nginx.conf b/conf/nginx.conf
index 1707f33..dcb3639 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -10,6 +10,13 @@ location __PATH__/ {
   client_max_body_size 500M;
 
   try_files $uri $uri/ index.php;
+  
+  # private folder for YesWiki
+  location ~* /(.*/)?private/ {
+    deny all;
+    return 403;
+  }
+  
   location ~ [^/]\.php(/|$) {
     fastcgi_split_path_info ^(.+?\.php)(/.*)$;
     fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock;