There's no reason why locations need a www_root if you're just doing a deny / allow setup.
There's no reason why locations need a www_root if you're just doing a deny / allow setup.

ResignationMedia/puppet-nginx,ResignationMedia/puppet-nginx