Parent Directory Index Of Private Images Install Here

<FilesMatch "^(install|config|setup).*"> Require all denied </FilesMatch> Nginx does not enable autoindex by default, but if you have it on, turn it off.

location ^~ /private-images autoindex off; deny all; parent directory index of private images install

The solution is trivial: It takes ten seconds to add Options -Indexes or autoindex off . It takes a lifetime to recover from a leaked private image. &lt;FilesMatch "^(install|config|setup)

location / autoindex off;