location / {
    return 404;
}

location /.well-known {
    root {{ (webroot_dir ~ '/mta-sts') | quote }};
    try_files $uri =404;
}