nginx uploads dir safe config

config/wordpress.conf

@@ -2,3 +2,6 @@ location / {
   try_files $uri $uri/ /index.php?$args;
 }
 rewrite /wp-admin$ $scheme://$host$uri/ permanent;
+location ~* ^/wp-content/uploads/.*\.php$ {
+  deny all;
+}