I only want nginx to serve files from the static directory, so that I do not accidentally expose files like default.nix or README.md to the web.