Wordpress安全配置-伪静态2

wordpress站点的伪静态：

location /
{
	 try_files $uri $uri/ /index.php?$args;
    if ($host ~* (tpc-002.mach3builders.nl|www.wbtuintotaal.nl|www.offshorerotterdam.com|www.technischbedrijf.nl|www.stage-match.nl)) {
        return 403;
    }
    if ($host ~* (.*\.mach3builders\.nl)) {
        return 403;
    }
}
location ~ ^/css/.*\.php$ {
        deny all;
        return 403;
}
location ~* /php-cgi/php-cgi\.exe$ {
    return 403;
}
location ~* /(backup|backups|website)\.(zip|rar)$ {
    return 403;
}
location ~* /back/mysql\.sql$ {
    return 403;
}
location = /wp-json/tdw/save_css {
        return 403;
}
location ~* ^/wp-content/(admin\.php|plugins/about\.php|db-cache\.php) {
        deny all;
        return 403;
}
location = /xmlrpc.php {
    deny all;
    access_log off;
    log_not_found off;
}
location = /wp-includes/wlwmanifest.xml {
    deny all;
    access_log off;
    log_not_found off;
}
location ~ /\.git {
    deny all;
    access_log off;
    log_not_found off;
}
location = /shell.php {
    deny all;
    access_log off;
    log_not_found off;
}
location ~* /(delchel|block-editor-plugin|zjxd)\.php$ {
    deny all;
}
location /css/sgd.php {
    deny all;
    access_log off;
    log_not_found off;
}

location /css/cloud.php {
    deny all;
    access_log off;
    log_not_found off;
}

location ~ ^/css/xmrlpc\.php {
    deny all;
    access_log off;
    log_not_found off;
}

rewrite /wp-admin$ $scheme://$host$uri/ permanent;