## always sourced by snip/deny-dotfiles access_log off; log_not_found off; internal;