location ~* /.bat {
  deny all;
}

location ^~ /configs/ {
  deny all;
}