diff --git a/src/freedombone-app-bludit b/src/freedombone-app-bludit
index e8bb59df4fbd214dc01c40baeeb31d046308248e..df5a8f4ed379999a42ae822f317c0878f7588886 100755
--- a/src/freedombone-app-bludit
+++ b/src/freedombone-app-bludit
@@ -292,6 +292,11 @@ function install_bludit {
           echo '  # Root';
           echo "  root /var/www/$BLUDIT_DOMAIN_NAME/htdocs;";
           echo '';
+          echo '  location ~ \.(jpg|jpeg|gif|png|css|js|ico|svg|eot|ttf|woff|woff2|otf)$ {';
+          echo '    access_log        off;';
+          echo '    expires           30d;';
+          echo '  }';
+          echo '';
           echo '  index index.php;';
           echo '  location ~ \.php {';
           echo '    include snippets/fastcgi-php.conf;';
@@ -304,6 +309,10 @@ function install_bludit {
         nginx_limits "$BLUDIT_DOMAIN_NAME" '15m'
         { echo "    try_files \$uri \$uri/ /index.php?\$args;";
           echo '  }';
+          echo '';
+          echo '  location ^~ /bl-content/tmp/ { deny all; }';
+          echo '  location ^~ /bl-content/pages/ { deny all; }';
+          echo '  location ^~ /bl-content/databases/ { deny all; } ';
           echo '}'; } >> "$bludit_nginx_site"
     else
         echo -n '' > "$bludit_nginx_site"
@@ -323,6 +332,11 @@ function install_bludit {
       echo '  # Root';
       echo "  root /var/www/$BLUDIT_DOMAIN_NAME/htdocs;";
       echo '';
+      echo '  location ~ \.(jpg|jpeg|gif|png|css|js|ico|svg|eot|ttf|woff|woff2|otf)$ {';
+      echo '    access_log        off;';
+      echo '    expires           30d;';
+      echo '  }';
+      echo '';
       echo '  index index.php;';
       echo '  location ~ \.php {';
       echo '    include snippets/fastcgi-php.conf;';
@@ -335,6 +349,10 @@ function install_bludit {
     nginx_limits "$BLUDIT_DOMAIN_NAME" '15m'
     { echo "    try_files \$uri \$uri/ index.php?\$args;";
       echo '  }';
+      echo '';
+      echo '  location ^~ /bl-content/tmp/ { deny all; }';
+      echo '  location ^~ /bl-content/pages/ { deny all; }';
+      echo '  location ^~ /bl-content/databases/ { deny all; } ';
       echo '}'; } >> "$bludit_nginx_site"
 
     configure_php