diff --git a/configs/nginx/folder.conf b/configs/nginx/folder.conf
index bfac0b6..ecf62fe 100644
--- a/configs/nginx/folder.conf
+++ b/configs/nginx/folder.conf
@@ -57,7 +57,7 @@ server {
         try_files $uri $uri/ @tkr_fallback;
     }
 
-    # Fallback for /tkr routing - all non-file requests go to index.php
+    # Fallback for /tkr routing - all non-file requests (e.g. /login) go to index.php
     location @tkr_fallback {
         fastcgi_pass php:9000;
         fastcgi_param SCRIPT_FILENAME /var/www/html/tkr/public/index.php;
@@ -70,7 +70,7 @@ server {
     }
 
     # Deny access to sensitive directories
-    location ~ ^/tkr/(storage|lib|vendor|config) {
+    location ~ ^/tkr/(storage|src|templates|vendor|config) {
         deny all;
         return 404;
     }