TagDiv Composer Conflicts with Host Security Settings

# Stop php access except to needed files in wp-includes
location ~* ^/{FOLDER}wp-includes/.*(?<!(js/tinymce/wp-tinymce))\.php$ {
internal; #internal allows ms-files.php rewrite in multisite to work
}

# Specifically locks down upload directories in case full wp-content rule below is skipped
location ~* /{FOLDER}(?:uploads|files)/.*\.php$ {
deny all;
}

# Deny direct access to .php files in the /wp-content/ directory (including sub-folders). # Note this can break some poorly coded plugins/themes, replace the plugin or remove this block if it causes trouble
location ~* ^/{FOLDER}wp-content/.*\.php$ {
deny all;
}

# Turn off directory indexing
autoindex off;

# Kills the LetsEncrypt acme challenge
# # Deny access to htaccess and other hidden files
# location ~ /{FOLDER}\. {
# deny all;
# }

# Deny access to wp-config.php file
location = /{FOLDER}wp-config.php {
deny all;
}

# Deny access to revealing or potentially dangerous files in the /wp-content/ directory (including sub-folders)
location ~* ^/{FOLDER}wp-content/.*\.(md|exe|sh|bak|inc|pot|po|mo|log|sql)$ {
deny all;
}