location ~* (wp-admin|.env|.git|/admin/) {
    deny all;
    return 403;
}