diff --git a/nginx.conf b/nginx.conf
new file mode 100644
index 0000000..fa81e5e
--- /dev/null
+++ b/nginx.conf
@@ -0,0 +1,20 @@
+location ~ ^/(wp-cron\.php|wp-config\.php|install\.php|xmlrpc\.php|config\.php|configuration\.php|\.env|\.git/|\.svn/|\.log$) {
+    # deny all;
+    # return 404;
+    rewrite ^(.*)$ /error-404/ redirect;
+}
+
+location ~ (LICENSE|\.md$|license\.txt|\.htaccess|readme\.html|readme\.txt) {
+    log_not_found off;
+    access_log off;
+    rewrite ^(.*)$ /error-404/ redirect;
+}
+
+location ~* ^/wp-json/wp/v2/users(/.*)?$ {
+    rewrite ^(.*)$ /error-404/ redirect;
+}
+
+location = /favicon.ico {
+    log_not_found off;
+    access_log off;
+}
\ No newline at end of file