diff --git a/default.conf b/default.conf
index 48aef90..3c93ace 100644
--- a/default.conf
+++ b/default.conf
@@ -33,5 +33,10 @@ server {
         deny all;
     }
 
+    location = /.env {
+        deny all;
+        return 404;
+    }
+
     access_log /dev/null;
 }