Ticket #42678: nginx-ossec.conf

        location /ossec {
                root /opt/local/www;
                index index.php;
                location ~ \.php$ {
                    fastcgi_pass   unix:/tmp/php.sock;
                    fastcgi_index  index.php;
                    include        fastcgi_params;
                }
                location ~ /\.ht {
                    deny  all;
                }
                location ~ /\.sh {
                    deny  all;
                }
                location ~ ossec_conf.php {
                    deny  all;
                }
                location ~ /(site|tmp|lib) {
                    deny  all;
                }
        }