diff --git a/roles/nginx/application/templates/global.conf b/roles/nginx/application/templates/global.conf
index 6a96f4e..90027b5 100644
--- a/roles/nginx/application/templates/global.conf
+++ b/roles/nginx/application/templates/global.conf
@@ -1,5 +1,8 @@
 include {{ nginx_snippets_directory }}/acme;
 
+# Do not serve hidden files except
+# - well-known as common web standard
+# - files prefixed with file because Nextcloud requires these locations for uploading files
 location ~ /\.(?!well-known)(?!file).* {
     log_not_found off;
     access_log off;