## always sourced by snip.d/deny-dotfiles access_log off; log_not_found off; internal;