title: Nginx Restrict Access to File
body: <p>Currently my config file (/etc/nginx/sites-available/default) says</p>
  
  <pre><code>server {
      listen 80 default_server;
      listen [::]:80 default_server;
  
      root /var/www/html;
  
      # Add index.php to the list if you are using PHP
      index index.html index.htm index.nginx-debian.html;
  
      server_name _;
  
      location /credentials.js {
                  deny all;
                  return 404;
          }
  
      location / {
          # First attempt to serve request as file, then
          # as directory, then fall back to displaying a 404.
          try_files $uri $uri/ =404;
      }
  
  }
  </code></pre>
  
  <p>but I can still access credentials.js via example.com/credentials.js from the web. Any suggestions? </p>