Update default.conf

Protects composer files and folders.

Author: Ym0T

nginx/conf.d/default.conf

@@ -35,6 +35,10 @@ server {
         fastcgi_read_timeout 300;
     }
 
+    location ~ /(vendor|composer\.lock|composer\.json) {
+        deny all;
+    }
+
     location ~ /\.git {
         deny all;
     }