fazer

     location /cache {
        deny all;
        location ~* \.(js|css|xml)$ {
        allow all;
        }
    } 

    location /templates {
        location ~* \.(js|css|scss|xml|png|gif|jpg|jpeg|ico|bmp|map|eot|svg|ttf|woff|woff2)$ {
            allow all;
            }
        deny all;
    }

location /cache {
        deny all;
    }

 location ~ ^/cache {
    deny all;
    location ~ \.(js|css|xml)$ {
        allow all;
    }
}

 
#
#  site config nginx/1.14.2 + php7.0-fpm for InstantCMS v1.x
#
server {
 
        listen       80;
        server_name sitename.com www.sitename.com;
        root /var/www/html;
        charset utf-8;
        autoindex off;
 
        fastcgi_index index.php;
        fastcgi_buffers 4 256k;
        fastcgi_busy_buffers_size 256k;
        fastcgi_temp_file_write_size 256k;
 
error_log  /var/log/nginx/error.log debug;
 
    location / {
        location ~* /(\.|credits\.txt|readme\.txt|license\..*\.txt$) { deny all; }
 
#                       удалить букву 'ё'  местный редактор иначе ломает разметку
       location ~* ^/(install|migrate)[ё/]*$ { try_files $uri $uri/ @rules; }
#                       удалить букву 'ё' местный редактор иначе ломает разметку
 
        try_files $uri $uri/ /index.php?$args;
 
        location ~ ^/.+\.php$ {
            fastcgi_pass   unix:/run/php/php7.0-fpm.sock;
            # If nginx running on TCP socket, comment line above and uncomment line beneath
            # fastcgi_pass    127.0.0.1:9000;
            include fastcgi_params;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            }
    }
 
    location @rules {
        return 302 http://$host;
    }
 
    location /cache {
        deny all;
    }
 
    location /filters {
        deny all;
    }
 
    location /images {
        location ~ \.php$ { return 403; }
    }
 
    location /languages {
        deny all;
    }
 
    location /upload {
        location ~* \.php$ { return 403; }
    }
 
 
    location /templates {
        location ~* \.(js|css|scss|xml|png|gif|jpg|jpeg|ico|bmp|map|eot|svg|ttf|woff|woff2)$ {
            allow all;
            }
        deny all;
    }
 
 }