Update default.conf.sample to deny dotfile access

[nemchik]

No description provided.

[Copilot]

Pull request overview

Updates the default nginx site configuration sample to block access to dotfiles while still permitting access to /.well-known (commonly needed for ACME challenges), and bumps the embedded version header.

Changes:

• Added explicit location handling to allow /.well-known requests.
• Added a regex location to return 404 for dotfile paths.
• Reformatted the PHP if (!-f ...) guard into a multi-line block.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[LinuxServer-CI]

I am a bot, here are the test results for this PR:
https://ci-tests.linuxserver.io/lspipepr/cops/4.3.1-pkg-f1788705-dev-72dfe8df2b534bad6c1f89b8ca2b3d13cc1e5325-pr-73/index.html
https://ci-tests.linuxserver.io/lspipepr/cops/4.3.1-pkg-f1788705-dev-72dfe8df2b534bad6c1f89b8ca2b3d13cc1e5325-pr-73/shellcheck-result.xml

Tag	Passed
amd64-4.3.1-pkg-f1788705-dev-72dfe8df2b534bad6c1f89b8ca2b3d13cc1e5325-pr-73	✅
arm64v8-4.3.1-pkg-f1788705-dev-72dfe8df2b534bad6c1f89b8ca2b3d13cc1e5325-pr-73	✅

[mikespub]

This seems to be a duplicate of PR #70 which was already included and merged in PR #72

[nemchik]

This seems to be a duplicate of PR #70 which was already included and merged in PR #72

This moves things around a bit based on the comments from copilot. There are PRs open on our other images using the nginx base that haven't merged yet, but the goal is to keep the confs similar across all of them.