diff --git a/roles/webserver-legacy/nginx/files/vhosts/hypership.space/www.conf b/roles/webserver-legacy/nginx/files/vhosts/hypership.space/www.conf
--- a/roles/webserver-legacy/nginx/files/vhosts/hypership.space/www.conf
+++ b/roles/webserver-legacy/nginx/files/vhosts/hypership.space/www.conf
@@ -27,6 +27,24 @@
     error_log /var/log/www/hypership.space/www-error.log;
     access_log /var/log/www/hypership.space/www-access.log;
 
+    location /content {
+        return 403;
+    }
+
+    location /content/users {
+        alias /srv/zed/content/users;
+    }
+
+    location /content/scenes {
+        alias /srv/zed/content/scenes;
+
+        location ~ \.tpl$ {
+            # This folder contains templates intended to be rendered,
+            # and not directly served.
+            return 403;
+        }
+    }
+
     location / {
         return 503;
     }