Update drop.conf

Author: philcryer

globals/drop.conf

@@ -9,6 +9,13 @@ if ($request_method !~ ^(GET|HEAD|POST)$ ) { return 444; }
 #location /.well-known/acme-challenge/ { try_files $uri /dev/null =404; }
 location ~ ^/.well-known/acme-challenge/* { allow all; }
 
+#### Necessary for LEDN ownership validation, other .well-known use (MORE COMPLETE?)
+#### from https://stackoverflow.com/a/49324172
+#### "I would go with an optimised code: So that all dots are denied except .well-known folder
+#location ~ /\.(?!well-known).* {
+#   deny all;
+#}
+
 #### Turn off logging for basic traffic, giving syslog a little relief
 location = /robots.txt  { access_log off; log_not_found off; }
 location ~ /\.          { access_log off; log_not_found off; deny all; }