diff --git a/mods/sample-nginx.config b/mods/sample-nginx.config
index 71d3785516..b90e1fe29f 100644
--- a/mods/sample-nginx.config
+++ b/mods/sample-nginx.config
@@ -141,4 +141,9 @@ server {
   location ~ /\. {
     deny all;
   }
+
+  # deny access to the CLI scripts
+  location ^~ /bin {
+    deny all;
+  }
 }