Deny wp-config.txt

etc/nginx/common/wpcommon.conf

@@ -8,6 +8,13 @@ location = /wp-login.php {
 	fastcgi_pass php;
 }
 
+# Disable wp-config.txt
+location = /wp-config.txt {
+	deny  all;
+	access_log off;
+	log_not_found off;
+}
+
 # Disallow PHP In Upload Folder
 location /wp-content/uploads/ {
 	location ~ \.php$ {