diff --git a/roles/nginx/application/templates/global.conf b/roles/nginx/application/templates/global.conf
index 90027b5..57251bf 100644
--- a/roles/nginx/application/templates/global.conf
+++ b/roles/nginx/application/templates/global.conf
@@ -1,14 +1,5 @@
 include {{ nginx_snippets_directory }}/acme;
 
-# Do not serve hidden files except
-# - well-known as common web standard
-# - files prefixed with file because Nextcloud requires these locations for uploading files
-location ~ /\.(?!well-known)(?!file).* {
-    log_not_found off;
-    access_log off;
-    return 404;
-}
-
 location = /robots.txt {
     allow all;
     log_not_found off;
diff --git a/roles/nginx/application/templates/root.conf b/roles/nginx/application/templates/root.conf
index 9430e3f..272450b 100644
--- a/roles/nginx/application/templates/root.conf
+++ b/roles/nginx/application/templates/root.conf
@@ -1 +1,10 @@
 include {{ nginx_snippets_directory }}/global;
+
+# Do not serve hidden files except
+# - well-known as common web standard
+# - files prefixed with file because Nextcloud requires these locations for uploading files
+location ~ /\.(?!well-known)(?!file).* {
+    log_not_found off;
+    access_log off;
+    return 404;
+}